CVE-2016-4158

Severity: high (CVSS 7.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-06-16 · updated 2026-06-17
Weakness: CWE-264

Description

Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.

Affected products

Adobe Creative Cloud Desktop Application: through 3.6.0.248
Microsoft Corporation Windows: all versions

References

https://helpx.adobe.com/security/products/creative-cloud/apsb16-21.html
https://helpx.adobe.com/security/products/creative-cloud/apsb16-21.html

Get alerted when CVE-2016-4158 or the next vulnerability affects your stack