← Vulnerability feed

Vulnerability record · CVE-2017-3006 · published 12 April 2017

CVE-2017-3006: Adobe creative cloud incorrect permission assignment vulnerability

Adobe · Creative Cloud

Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions during the installation of Creative Cloud desktop applications.

8.8 CVSS 3.0 High EPSS 11% · top 4.3% CWE-732 · Incorrect permission assignment
8.8CVSS 3.0 base score, v2 9.0
11%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions during the installation of Creative Cloud desktop applications.

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://hyp3rlinx.altervista.org/advisories/ADOBE-CREATIVE-CLOUD-PRIVILEGE-ESCALATION.txt ExploitThird Party Advisory
http://www.securityfocus.com/bid/97555 Third Party AdvisoryVDB Entry
https://helpx.adobe.com/security/products/creative-cloud/apsb17-13.html Vendor Advisory
https://www.exploit-db.com/exploits/41878/
http://hyp3rlinx.altervista.org/advisories/ADOBE-CREATIVE-CLOUD-PRIVILEGE-ESCALATION.txt ExploitThird Party Advisory
http://www.securityfocus.com/bid/97555 Third Party AdvisoryVDB Entry
https://helpx.adobe.com/security/products/creative-cloud/apsb17-13.html Vendor Advisory
https://www.exploit-db.com/exploits/41878/

Track CVE-2017-3006 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-9669Adobe creative cloud improper privilege management vulnerabilityAdobe Creative Cloud Desktop Application versions 5.1 and earlier have a lack of exploit mitigations vulnerability. Successful exploitation could lea…EPSS 3.4%9.8CVE-2019-8236Adobe creative cloud vulnerabilityCreative Cloud Desktop Application version 4.6.1 and earlier versions have Security Bypass vulnerability. Successful exploitation could lead to Privi…EPSS 3.4%9.8CVE-2019-7958Adobe creative cloud incorrect permission assignment vulnerabilityCreative Cloud Desktop Application versions 4.6.1 and earlier have an insecure inherited permissions vulnerability. Successful exploitation could lea…EPSS 4.4%9.8CVE-2019-7959Adobe creative cloud improper input validation vulnerabilityCreative Cloud Desktop Application versions 4.6.1 and earlier have a using components with known vulnerabilities vulnerability. Successful exploitati…EPSS 6.5%9.8CVE-2018-12829Adobe creative cloud improper certificate validation vulnerabilityAdobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability. Successful exploitation could lead to pri…EPSS 5.1%9.8CVE-2018-4991Adobe creative cloud improper certificate validation vulnerabilityAdobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful…EPSS 4.0%9.1CVE-2016-1034Adobe creative cloud vulnerabilityThe Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remote attack…EPSS 2.8%7.8CVE-2023-26358Adobe creative cloud untrusted search path vulnerabilityCreative Cloud version 5.9.1 (and earlier) is affected by an Untrusted Search Path vulnerability that might allow attackers to execute their own prog…EPSS 0.36%

Source: NIST National Vulnerability Database (record CVE-2017-3006), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.