Vulnerability record · CVE-2016-4157 · published 16 June 2016

CVE-2016-4157: Adobe creative cloud permissions and access controls vulnerability

Adobe · Creative Cloud

Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory.

7.3 CVSS 3.0 High EPSS 0.71% · top 48.1% CWE-264 · Permissions and access controls

7.3CVSS 3.0 base score, v2 6.9

0.71%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

2References

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Creative Cloud Adobe

References

Link	Tags
https://helpx.adobe.com/security/products/creative-cloud/apsb16-21.html	Vendor Advisory
https://helpx.adobe.com/security/products/creative-cloud/apsb16-21.html	Vendor Advisory

Track CVE-2016-4157 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-9669Adobe creative cloud improper privilege management vulnerabilityAdobe Creative Cloud Desktop Application versions 5.1 and earlier have a lack of exploit mitigations vulnerability. Successful exploitation could lea…EPSS 3.4%17 Jul 2020 9.8CVE-2019-8236Adobe creative cloud vulnerabilityCreative Cloud Desktop Application version 4.6.1 and earlier versions have Security Bypass vulnerability. Successful exploitation could lead to Privi…EPSS 3.4%23 Oct 2019 9.8CVE-2019-7959Adobe creative cloud improper input validation vulnerabilityCreative Cloud Desktop Application versions 4.6.1 and earlier have a using components with known vulnerabilities vulnerability. Successful exploitati…EPSS 6.5%16 Aug 2019 9.8CVE-2019-7958Adobe creative cloud incorrect permission assignment vulnerabilityCreative Cloud Desktop Application versions 4.6.1 and earlier have an insecure inherited permissions vulnerability. Successful exploitation could lea…EPSS 4.4%16 Aug 2019 9.8CVE-2018-12829Adobe creative cloud improper certificate validation vulnerabilityAdobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability. Successful exploitation could lead to pri…EPSS 5.1%29 Aug 2018 9.8CVE-2018-4991Adobe creative cloud improper certificate validation vulnerabilityAdobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful…EPSS 4.0%19 May 2018 9.1CVE-2016-1034Adobe creative cloud vulnerabilityThe Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remote attack…EPSS 2.8%12 Apr 2016 8.8CVE-2017-3006Adobe creative cloud incorrect permission assignment vulnerabilityAdobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions during the installation of Creativ…EPSS 11%12 Apr 2017

Source: NIST National Vulnerability Database (record CVE-2016-4157), CISA KEV, FIRST EPSS (scores of 2026-10-02). This page is refreshed as NVD updates the record.