CVE Vulnerabilities

CVE-2025-64896

Creation of Temporary File in Directory with Insecure Permissions

Published: Dec 09, 2025 | Modified: Dec 12, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Creative Cloud Desktop versions 6.4.0.361 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to disrupt the applications functionality by manipulating temporary files. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Weakness

The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file’s existence or otherwise access that file.

Affected Software

Name Vendor Start Version End Version
Creative_cloud Adobe * 6.8.0.821 (excluding)

Potential Mitigations

References