Home

CVE-2021-43019

Description

Adobe Creative Cloud version 5.5 (and earlier) are affected by a privilege escalation vulnerability in the resources leveraged by the Setup.exe service. An unauthenticated attacker could leverage this vulnerability to remove files and escalate privileges under the context of SYSTEM . An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability on the product installer. User interaction is required before product installation to abuse this vulnerability.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.542

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2021-43017,CVE-2021-43019,CVE-2022-23202 are affected in Adobe Creative Cloud (x64) 2.7.0.13Windows
Vulnerabilities CVE-2021-43017,CVE-2021-43019,CVE-2022-23202 are affected in Adobe Creative Cloud 2.7.0.13Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234