CVE-2016-4157

Severity: high (CVSS 7.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-06-16 · updated 2026-06-17
Weakness: CWE-264

Description

Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory.

Affected products

Adobe Creative Cloud Desktop Application: through 3.6.0.248

References

https://helpx.adobe.com/security/products/creative-cloud/apsb16-21.html
https://helpx.adobe.com/security/products/creative-cloud/apsb16-21.html

Get alerted when CVE-2016-4157 or the next vulnerability affects your stack