Reddit NetSec

CVE Database V5

AlienVault OTX General

Reddit InfoSec News

Exploit-DB RSS Feed

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction

CVE-2021-21078 is a vulnerability identified in the Adobe Creative Cloud Desktop Application, specifically affecting version 5.3 and earlier. The issue is classified as an Untrusted Search Path vulnerability (CWE-426) within the CCXProcess component. This vulnerability arises due to an unquoted service path, which can be exploited by an attacker to execute arbitrary code with the privileges of the current user. The unquoted service path means that if the path to the executable contains spaces and is not enclosed in quotes, Windows may incorrectly interpret the path and execute a malicious executable placed by an attacker in a higher priority directory. Exploitation requires user interaction, such as running the Creative Cloud desktop application or triggering the service, which makes it less likely to be exploited remotely without user involvement. There are no known exploits in the wild reported for this vulnerability, and Adobe has not provided a patch link in the provided information, indicating that remediation may require manual mitigation or updates from Adobe. The vulnerability impacts the confidentiality, integrity, and availability of the system by allowing arbitrary code execution, potentially leading to privilege escalation or persistence of malicious code under the context of the logged-in user. Since the vulnerability is local and requires user interaction, the attack vector is limited but still significant, especially in environments where Adobe Creative Cloud is widely used.

Detailed information about CVE-2021-21078: Untrusted Search Path (CWE-426) in Adobe Creative Cloud (desktop component) affecting Adobe Creative Cloud (desktop c

CVE-2021-21078: Untrusted Search Path (CWE-426) in Adobe Creative Cloud (desktop component) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2021-21078: Untrusted Search Path (CWE-426) in Adobe Creative Cloud (desktop component)

Adobe Dreamweaver versions 21.0 (and earlier) and 20.2 (and earlier) is affected by an untrusted search path vulnerability that could result in information disclosure. An attacker with physical access to the system could replace certain configuration files and dynamic libraries that Dreamweaver references, potentially resulting in information disclosure.

CVE-2021-21055 is a vulnerability classified under CWE-426 (Untrusted Search Path) affecting Adobe Dreamweaver versions 21.0 and earlier, as well as 20.2 and earlier. This vulnerability arises because Dreamweaver improperly handles the search path for certain configuration files and dynamic libraries it loads during execution. An attacker with physical access to the affected system can exploit this flaw by replacing or inserting malicious configuration files or dynamic libraries in locations that Dreamweaver references before the legitimate ones. This manipulation can lead to unintended information disclosure, as the malicious files could cause Dreamweaver to leak sensitive data or behave in an unauthorized manner. The vulnerability requires physical access, meaning remote exploitation is not feasible under normal circumstances. There are no known exploits in the wild, and Adobe has not provided specific patches linked in the provided data, though the vulnerability was publicly disclosed in early 2021. The nature of the vulnerability is such that it compromises the integrity of the file loading process, potentially exposing confidential information stored or processed by Dreamweaver. Since Dreamweaver is a web development tool used to create and manage websites, the exposure of project files or credentials could lead to further security risks if leveraged by an attacker. The vulnerability does not require user interaction beyond the attacker’s physical manipulation of the system files, and it specifically impacts confidentiality more than availability or integrity of the system as a whole.

Detailed information about CVE-2021-21055: Untrusted Search Path (CWE-426) in Adobe Dreamweaver affecting Adobe Dreamweaver. Get real-time updates, technical de

Title	Severity	Type	Source	Date

Threats Tagged 'untrusted-search-path-cwe-426'

Filter Threats

Threats Tagged 'untrusted-search-path-cwe-426'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility