CVE-2016-4158

—

CVSS 3.0

7.3 high

EPSS

3%p87

Published

Jun 16, 2016 (Jun 16, 2016)

Modified

Jun 17, 2026

Description

Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.

Vendors: microsoft adobe
Products: windows, creative cloud
Weakness: CWE-264
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news0 stories

No ingested article mentions this CVE yet.