7.8Yüksek
CVE-2026-48344GoCart | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
Açıklama
Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.
Zayıflık türü (CWE):
CWE-367
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Adobe | Creative Cloud Desktop | ≤ 6.9.1.1, fixed 6.10.0.252.3 | |
| adobe | creative cloud desktop application | ≤ 6.9.1.1 |
Kaynaklar ve yamalar
- https://helpx.adobe.com/security/products/creative-cloud/apsb26-77.html vendor-advisoryVendor Advisory
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:adobe:creative_cloud_desktop_application:*:*:*:*:*:*:*:*≤ 6.9.1.1