Bulletin ID
Security updates available for Creative Cloud Desktop Application | APSB18-32
|  | Date Published | Priority | 
|---|---|---|
| APSB18-32 | August 28, 2018 | 2 | 
Summary
Adobe has released a security update for the Creative Cloud Desktop Application for Windows and macOS.  This update resolves an important vulnerability (CVE-2018-12829) that could lead to privilege escalation.
Affected versions
| Product | Affected version | Platform | 
| Creative Cloud Desktop Application | 4.6.0 and earlier versions | Windows & macOS | 
To check the version of the Adobe Creative Cloud desktop app:
- Launch the Creative Cloud desktop app and sign in with your Adobe ID
- Click the gear icon and choose Preferences > General
Solution
Adobe categorizes this update with the following priority rating and recommends users update their installation to the newest version:
| Product | Updated version | Platform | Priority rating | Availability | 
| Creative Cloud Desktop Application | 4.6.1 | Windows & macOS | 2 | 
The latest Creative Cloud Desktop App installer can be downloaded from the Download Center. For more information, please reference this help Page.
Vulnerability Details
| Vulnerability Category | Vulnerability Impact | Severity | CVE Numbers | 
|---|---|---|---|
| Improper Certificate Validation | Privilege Escalation | Important | CVE-2018-12829 | 
Acknowledgments
Adobe would like to thank Chi Chou of AntFinancial LightYear Labs (CVE-2018-12829) for reporting this issue and for working with Adobe to help protect our customers.