Creative Cloud Desktop versions 6.4.0.361 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to disrupt the application's functionality by manipulating temporary files. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00022.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Adobe Creative Cloud Desktop affected
Version Status Constraints
0 affected ≤ 6.4.0.361

Configuration 1 [-]

AND
cpe:2.3:a:adobe:creative_cloud:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Adobe Subscribe
Creative Cloud Subscribe
Creative Cloud Desktop Application Subscribe

Project Subscriptions

Vendors Products
Adobe Subscribe
Creative Cloud Subscribe
Creative Cloud Desktop Application Subscribe
Apple Subscribe
Macos Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://helpx.adobe.com/security/products/creative-cloud/apsb25-120.html cve-icon cve-icon
History

Fri, 12 Dec 2025 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
CPEs cpe:2.3:a:adobe:creative_cloud:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos

Wed, 10 Dec 2025 18:00:00 +0000

Type Values Removed Values Added
First Time appeared Adobe
Adobe creative Cloud
Adobe creative Cloud Desktop Application
Vendors & Products Adobe
Adobe creative Cloud
Adobe creative Cloud Desktop Application

Tue, 09 Dec 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 09 Dec 2025 20:45:00 +0000

Type Values Removed Values Added
Description Creative Cloud Desktop versions 6.4.0.361 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to disrupt the application's functionality by manipulating temporary files. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Title Creative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)
Weaknesses CWE-379
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published:

Updated: 2025-12-09T20:56:43.309Z

Reserved: 2025-11-11T22:48:38.847Z

Link: CVE-2025-64896

cve-icon Vulnrichment

Updated: 2025-12-09T20:56:40.421Z

cve-icon NVD

Status : Analyzed

Published: 2025-12-09T21:15:59.540

Modified: 2025-12-12T18:49:34.957

Link: CVE-2025-64896

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-12-10T17:48:54Z

Weaknesses