CVE-2021-28581: 
Adobe Creative Cloud vulnerability analysis and mitigation

Adobe Creative Cloud Desktop 3.5 and earlier versions were found to contain an uncontrolled search path vulnerability identified as CVE-2021-28581. The vulnerability was disclosed and published on September 8, 2021, affecting Adobe Creative Cloud Desktop application versions up to 5.3 (NVD, Adobe Advisory).

The vulnerability is classified as an uncontrolled search path element (CWE-427) that could lead to privilege escalation. The CVSS 3.0 base score is 7.3 (High), with the vector string CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H. Under CVSS 2.0, it received a base score of 4.4 (Medium) with the vector (AV:L/AC:M/Au:N/C:P/I:P/A:P) (NVD).

If successfully exploited, this vulnerability could result in elevation of privileges on the affected system. The vulnerability affects confidentiality, integrity, and availability of the system, with all three aspects rated as High under CVSS 3.0 scoring (NVD).

Adobe has addressed this vulnerability in newer versions of Creative Cloud Desktop. Users are advised to update their Adobe Creative Cloud Desktop application to a version newer than 5.3 (Adobe Advisory).