5.5Medium
CVE-2025-64896Creative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)
Description
Creative Cloud Desktop versions 6.4.0.361 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to disrupt the application's functionality by manipulating temporary files. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Weakness (CWE):
CWE-379
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| adobe | creative cloud | < 6.8.0.821 | |
| Adobe | Creative Cloud Desktop | ≤ 6.4.0.361 |
References and patches
- https://helpx.adobe.com/security/products/creative-cloud/apsb25-120.html vendor-advisoryVendor Advisory
CPE matches (NVD) (1)
cpe:2.3:a:adobe:creative_cloud:*:*:*:*:*:*:*:*< 6.8.0.821