CVE-2020-3808

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

Creative Cloud Desktop Application versions 5.0 and earlier have a time-of-check to time-of-use (toctou) race condition vulnerability. Successful exploitation could lead to arbitrary file deletion.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-367

Affected software

No affected versions have been published.

Timeline

Published: Mar 25, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-38095.5Adobe After Effects versions 17.0.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information CVE-2020-38105.5Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing special CVE-2020-38117.5qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.CVE-2020-38125.5qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for the existence of fi CVE-2020-38258.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13 CVE-2020-38267.8An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.1 CVE-2020-38277.8A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. Viewing a maliciously CVE-2020-38282.4A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fi CVE-2020-38297.8An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15 CVE-2020-38303.3A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed i CVE-2020-38317.0A race condition was addressed with improved locking. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. An application may be able to exe CVE-2020-38334.3An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.5. Visiting a maliciou