Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2021-40708

Adobe Genuine Service Installer Privilege Escalation Vulnerability

Adobe Genuine Service versions 7.3 (and earlier) are affected by a privilege escalation vulnerability in the AGSService installer. An authenticated attacker could leverage this vulnerability to achieve read / write privileges to execute arbitrary code. User interaction is required to abuse this vulnerability.

CVSS 3.1 · 7.3 High EPSS 1.7% KEV · Not listed
Vendors
Adobe Apple Microsoft
Products
Genuine Service Macos Windows
CVE-2021-28568

Adobe Genuine Services insecure file permission could lead to privilege escalation

Adobe Genuine Services version 7.1 (and earlier) is affected by an Insecure file permission vulnerability during installation process. A local authenticated attacker could leverage this vulnerability to achieve privilege escalation in the context of the current user.

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Adobe Apple Microsoft
Products
Genuine Service Macos Windows
CVE-2020-9681

Adobe Genuine Service privilege escalation vulnerability

Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker could exploit this to rewrite the file of the administrator, which may lead to elevated permissions. Exploitation of this issue requires user interaction.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Adobe Apple Microsoft
Products
Genuine Service Macos Windows
CVE-2020-9668

AGSService program mishandling symbolic links

Adobe Genuine Service version 6.6 (and earlier) is affected by an Improper Access control vulnerability when handling symbolic links. An unauthenticated attacker could exploit this to elevate privileges in the context of the current user.

CVSS 3.1 · 7.8 High EPSS 1.7% KEV · Not listed
Vendors
Adobe Apple Microsoft
Products
Genuine Service Macos Windows
CVE-2020-9667

Uncontrolled Search Path Element in AGSService.exe

Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker with admin privileges could plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Adobe Apple Microsoft
Products
Genuine Service Macos Windows