CVE-2020-9682

—

CVSS 3.1

9.8 critical

EPSS

4%p91

Published

Jul 17, 2020 (Jul 17, 2020)

Modified

Jun 17, 2026

Description

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to arbitrary file system write.

Vendors: adobe
Products: creative cloud desktop application
Weakness: CWE-59
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.3%)

In the news2 stories

Adobe Issues July 2020 Critical Security Patches for Multiple Software

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2020Vulnerability in the wildCVE-2020-9682 CVE-2020-9650 CVE-2020-9646+1 CVEs

Adobe fixes over a dozen flaws in Media Encoder, Download Manager

Security AffairsJul 14, 17:59 UTC · Jul 14, 2020Vulnerability CVE-2020-9688 CVE-2020-9669 CVE-2020-9671+3 CVEs