Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.1

Adobe Creative Cloud Desktop lets attackers read or change files

CVE-2016-1034 · published 10 years ago
Summary

The desktop version of Adobe Creative Cloud (versions earlier than 3.6.0.244) contains a weakness in its library‑sync code that could let a remote attacker view or modify files on your computer. This could expose confidential documents or allow malicious changes. Upgrade to the latest Creative Cloud release as soon as possible to close the gap.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
adobe creative_cloud <= 3.5.1.209
cpe:2.3:a:adobe:creative_cloud:*:*:*:*:*:*:*:*
Original advisory text
The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remote attackers to read or write to arbitrary files via unsp...
The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remote attackers to read or write to arbitrary files via unspecified vectors.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.1 Critical
Exploitation
3% chance of attack within 30 days
Timeline
Published12 Apr 2016
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2016-1034 · NVD
Track software like this
Free during beta