Product:
Creative Cloud Desktop
Summary
Creative Cloud Desktop versions 6.4.0.361 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to disrupt the application’s functionality by manipulating temporary files. Exploitation requires user interaction as a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-64896 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious file that, when opened by the victim, manipulates temporary files within the application. This requires the victim to be tricked into opening the file, leading to potential disruption of the application’s functionality.
Affected Products
- Creative Cloud Desktop versions 6.4.0.361 and earlier: Vulnerable to denial-of-service due to incorrect permissions on temporary files.
Mitigation
To mitigate this vulnerability, users should avoid opening files from untrusted sources and ensure that they are using the latest version of Creative Cloud Desktop. Regular updates and security patches from Adobe should be applied promptly to reduce the risk of exploitation.