5.5Medium

CVE-2025-64896Creative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)

Adobe Creative Cloud Desktop Published: (11 months ago)

Description

Creative Cloud Desktop versions 6.4.0.361 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to disrupt the application's functionality by manipulating temporary files. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Weakness (CWE): CWE-379

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
adobe creative cloud < 6.8.0.821
Adobe Creative Cloud Desktop ≤ 6.4.0.361

References and patches

CPE matches (NVD) (1)

  • cpe:2.3:a:adobe:creative_cloud:*:*:*:*:*:*:*:* < 6.8.0.821