CVE-2020-9668
HIGHAdobe Genuine Service < 6.6 - Unauthenticated Privilege Escalation via Symbolic Link Handling
Title source: llmDescription
Adobe Genuine Service version 6.6 (and earlier) is affected by an Improper Access control vulnerability when handling symbolic links. An unauthenticated attacker could exploit this to elevate privileges in the context of the current user.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://helpx.adobe.com/security/products/integrity_service/apsb20-42.html
Scores
CVSS v3
7.8
EPSS
0.0164
EPSS Percentile
73.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-284
Status
published
Products (1)
adobe/genuine_service
< 6.6
Published
Apr 16, 2021
Tracked Since
Feb 18, 2026