CVE-2021-28547

Summary

Adobe Creative Cloud Desktop Application for macOS version 5.3 (and earlier) is affected by a privilege escalation vulnerability that could allow a normal user to delete the OOBE directory and get permissions of any directory under the administrator authority.

Affected Software

VendorProductVersion RangeStatus
AdobeCreative Cloud (desktop component)unspecified <= 5.3affected
AdobeCreative Cloud (desktop component)unspecified <= Noneaffected

Weaknesses

  • CWE-20: Improper Input Validation (CWE-20)

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References