VDB
CVE-2016-1034
CVE-2016-1034
PUBLISHED
CVSS 9.100000381469727 CRITICAL
The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remote attackers to read or write to arbitrary files via unspecified vectors.
EPSS 1.47% · 81.3th percentile
Risk Scores
CVSS v3.0
9.100000381469727
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
1.47%
81.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| adobe | creative_cloud | 0 |
Timeline
- Apr 12, 2016 CVE Published
- Feb 4, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Feb 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 24, 2023 EPSS Score
- Jul 14, 2023 EPSS Score
- Jul 15, 2023 EPSS Score
- Sep 6, 2023 EPSS Score
- Oct 26, 2023 EPSS Score
References
- https://helpx.adobe.com/security/products/robohelp-server/apsb16-12.html advisory
- https://helpx.adobe.com/security/products/creative-cloud/apsb16-11.html advisory
- http://www.zerodayinitiative.com/advisories/ZDI-16-235 url
- https://source.android.com/security/bulletin/2017-06-01 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2016-1034 advisory