5.5Media

CVE-2025-64896Creative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)

Adobe Creative Cloud Desktop Publicada: (hace 11 meses)

Descripción

Creative Cloud Desktop versions 6.4.0.361 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to disrupt the application's functionality by manipulating temporary files. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Debilidad (CWE): CWE-379

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
adobe creative cloud < 6.8.0.821
Adobe Creative Cloud Desktop ≤ 6.4.0.361

Referencias y parches

Coincidencias CPE (NVD) (1)

  • cpe:2.3:a:adobe:creative_cloud:*:*:*:*:*:*:*:* < 6.8.0.821