PT-2025-42383 · Adobe · Creative Cloud Desktop

Published 2025-10-15 · Updated 2025-10-15 · CVE-2025-54271

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Creative Cloud Desktop versions 6.7.0.278 and earlier

Description A Time-of-check Time-of-use (TOCTOU) Race Condition exists in Creative Cloud Desktop that could allow arbitrary file system write. An attacker with low privileges could exploit the timing between the check and use of a resource, potentially leading to unauthorized file modifications. Exploitation does not require user interaction.

Recommendations Update Creative Cloud Desktop to a version later than 6.7.0.278.

Fix

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2025-54271

Affected Products

Creative Cloud Desktop

References · 5

• https://helpx.adobe.com/security/products/creative-cloud/apsb25-95.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54271 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54271 · Security Note
• https://twitter.com/CVEnew/status/1978545033633845642 · Twitter Post
• https://t.me/CVEtracker/35027 · Telegram Post