CVE-2018-15976
HIGHAdobe Technical Communications Suite < 1.0.5.1 - Uncontrolled Search Path Element
Title source: llmDescription
Adobe Technical Communications Suite versions 1.0.5.1 and below have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.
References (5)
Core 5
Core References
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/151000
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/105535
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1041820
Patch, Vendor Advisory x_refsource_confirm
https://helpx.adobe.com/security/products/techcommsuite/apsb18-38.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1041819
Scores
CVSS v3
7.8
EPSS
0.0537
EPSS Percentile
91.6%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-427
Status
published
Products (1)
adobe/technical_communications_suite
< 1.0.5.1
Published
Oct 17, 2018
Tracked Since
Feb 18, 2026