CVE-2020-3766 Privilege escalation in Adobe Genuine Integrity Service
Attackers can exploit insecure file permissions in Adobe Genuine Integrity Service to escalate privileges on the local system.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-3766?
CVE-2020-3766 is a high-severity vulnerability in Adobe Genuine Integrity Service, published on 25 Mar 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Adobe Genuine Integrity Service versions Version 6.4 and earlier have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation.
Weakness: CWE-276
Which versions are affected by CVE-2020-3766?
It affects 1 product.
Products include Adobe Genuine Integrity Service.
How do I fix CVE-2020-3766?
No fix has been published for CVE-2020-3766 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-3766 being exploited?
There is no known exploitation of CVE-2020-3766 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-5622-5mvm-7268.