CVE-2018-5003

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Adobe Creative Cloud Desktop Application before 4.5.5.342 (installer) has an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-426

Affected software

Vendor	Product	Versions
n/a	Adobe Creative Cloud Desktop Application before 4.5.5.342	Adobe Creative Cloud Desktop Application before 4.5.5.342

References

http://www.securityfocus.com/bid/105065Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1041469Third Party Advisory, VDB Entry
https://helpx.adobe.com/security/products/creative-cloud/apsb18-20.htmlVendor Advisory
http://www.securityfocus.com/bid/105065Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1041469Third Party Advisory, VDB Entry
https://helpx.adobe.com/security/products/creative-cloud/apsb18-20.htmlVendor Advisory

Timeline

Published: Aug 29, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-50047.5Adobe Experience Manager versions 6.2 and 6.3 have a Server-Side Request Forgery vulnerability. Successful exploitation could lead to sensit CVE-2018-50056.1Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a Cross-site Scripting vulnerability. Successful exploitation could lead CVE-2018-50067.5Adobe Experience Manager versions 6.4 and earlier have a Server-Side Request Forgery vulnerability. Successful exploitation could lead to se CVE-2018-50078.8Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code CVE-2018-50087.5Adobe Flash Player 30.0.0.113 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to informati CVE-2018-50099.8Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-fr CVE-2018-50107.5Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun CVE-2018-50119.8Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-fr CVE-2018-50128.8Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Untrusted p CVE-2018-50146.5Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun CVE-2018-50158.8Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo CVE-2018-50166.5Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun