CVE-2021-28581

7.3 highEPSS 0.9%

High (7.3) in adobe creative cloud. EPSS 0.9% chance of exploitation in the next 30 days.

Adobe Creative Cloud Desktop 3.5 (and earlier) is affected by an uncontrolled search path vulnerability that could result in elevation of privileges. Exploitation of this issue requires user interaction in that a victim must log on to the attacker's local machine.

Severity

CVSS 3.0

7.3 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2021-09-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:creative_cloud

References

https://helpx.adobe.com/security/products/creative-cloud/apsb21-31.html
https://helpx.adobe.com/security/products/creative-cloud/apsb21-31.html

Check your stack JSON