CVE-2020-9667

MEDIUM

Adobe Genuine Service < 6.6 - Uncontrolled Search Path

Title source: rule

Description

Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker with admin privileges could plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction.

References (1)

[Vendor Advisory] https://helpx.adobe.com/security/products/integrity_service/apsb20-42.html

Scores

CVSS v3 6.5

EPSS 0.0008

EPSS Percentile 22.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Classification

CWE

CWE-427

Status published

Affected Products (1)

adobe/genuine_service < 6.6

Timeline

Published Apr 16, 2021

Tracked Since Feb 18, 2026