Adobe has released a security update for the Creative Cloud Desktop Application installer for Windows.  This update resolves an insecure library loading vulnerability in the installer that could lead to privilege escalation (CVE-2018-5003).

Affected versions

To check the version of the Adobe Creative Cloud desktop app:

1. Launch the Creative Cloud desktop app and sign in with your Adobe ID.
2. Click the gear icon and choose Preferences > General.

Solution

Adobe categorizes this update with the following priority rating and recommends users update their installation to the newest version:

The latest Creative Cloud Desktop App installer can also be downloaded from the Download Center. 

Vulnerability Details

Acknowledgments

Adobe would like to thank the following individual for reporting the relevant issues and for working with Adobe to help protect our customers: 

• Alec Blance (CVE-2018-5003)