Adobe Genuine Service vulnerabilities

5 CVEs affecting Adobe Genuine Service, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-40708, published 2021-09-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-40708, published 2021-09-29. High severity, CVSS 7.3. EPSS: 1.7% chance of exploitation in the next 30 days. Adobe Genuine Service versions 7.3 (and earlier) are affected by a privilege escalation vulnerability in the AGSService installer. An authenticated attacker could leverage this vulnerability to…
CVE-2020-9668, published 2021-04-16. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. Adobe Genuine Service version 6.6 (and earlier) is affected by an Improper Access control vulnerability when handling symbolic links. An unauthenticated attacker could exploit this to elevate…
CVE-2020-9681, published 2021-04-16. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker could exploit this to rewrite the file of the…
CVE-2021-28568, published 2021-09-08. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. Adobe Genuine Services version 7.1 (and earlier) is affected by an Insecure file permission vulnerability during installation process. A local authenticated attacker could leverage this vulnerability…
CVE-2020-9667, published 2021-04-16. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker with admin privileges could plant custom binaries and…