ZDI-26-420: Adobe Creative Cloud AGSService Incorrect Permission Assignment Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Creative Cloud Desktop Application. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-48344.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-26-420?
ZDI-26-420 has a risk score of 46, indicating a moderate severity level.
How do I fix ZDI-26-420?
To fix ZDI-26-420, ensure that you update your Adobe Creative Cloud Desktop Application to the latest version that includes security patches.
What type of vulnerability is ZDI-26-420?
ZDI-26-420 is a local privilege escalation vulnerability due to incorrect permission assignment.
Who is affected by ZDI-26-420?
ZDI-26-420 affects users of the Adobe Creative Cloud Desktop Application that are running vulnerable versions.
What must an attacker do to exploit ZDI-26-420?
An attacker must first gain the ability to execute low-privileged code on the target system to exploit ZDI-26-420.