CVE-2021-28633 MEDIUM

CVE-2021-28633: Adobe Creative Cloud Installer Arbitrary File Write

Vendor Adobe
Product Creative Cloud (desktop component)
Weakness CWE-379
Published August 24, 2021
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

6.1/10
Attack vector Physical
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Adobe Creative Cloud Desktop Application (installer) version 2.4 (and earlier) is affected by an Insecure temporary file creation vulnerability. An attacker could leverage this vulnerability to cause arbitrary file overwriting in the context of the current user. Exploitation of this issue requires physical interaction to the system.

Key dates

02Disclosure timeline

August 24, 2021 CVE published
September 17, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-28597 Adobe Photoshop Elements Privilege Escalation Vulnerability - symbolic link CVE-2013-1815 Packstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation CVE-2021-21363 Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory CVE-2025-21162 Photoshop Elements | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379) CVE-2021-21100 Adobe Digital Editions Arbitrary file system write vulnerability