CVE-2021-28633

6.1 mediumEPSS 0.5%

Adobe Creative Cloud Desktop Application (installer) version 2.4 (and earlier) is affected by an Insecure temporary file creation vulnerability. An attacker could leverage this vulnerability to cause arbitrary file overwriting in the context of the current user. Exploitation of this issue requires physical interaction to the system.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWEs: CWE-668, CWE-379
Published: 2021-08-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:creative_cloud_desktop_application

References

https://helpx.adobe.com/security/products/creative-cloud/apsb21-41.html
https://helpx.adobe.com/security/products/creative-cloud/apsb21-41.html

Check your stack JSON