CVE-2026-48344: falha de alta gravidade em Adobe Creative Cloud Desktop
GoCart | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 0.2%
Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Adobe · Creative Cloud DesktopCVEs relacionadas — Adobe Creative Cloud Desktop
No mesmo produto, das mais perigosas para as menos.
CVE-2024-34116HIGHAdobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege EscalationEPSS 0.3%CVE-2026-48272HIGHCreative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)EPSS 0.2%CVE-2025-64896MEDIUMCreative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)EPSS 0.2%CVE-2025-54271MEDIUMCreative Cloud Desktop | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)EPSS 0.1%