CVE-2022-23202 Adobe Creative Cloud Desktop Uncontrolled Search Path Element Arbitrary code execution

High 7.0 Published 16 Feb 2022 Updated 23 Apr 2025

An attacker can execute arbitrary code by placing a malicious DLL in the installer folder, requiring user interaction to trigger the load.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2022-23202?

CVE-2022-23202 is a high-severity vulnerability in Adobe Creative Cloud (desktop component), published on 16 Feb 2022. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Adobe Creative Cloud Desktop version 2.7.0.13 (and earlier) is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must download a malicious DLL file. The attacker has to deliver the DLL on the same folder as the installer which makes it as a high complexity attack vector.

Weakness: CWE-427

Which versions are affected by CVE-2022-23202?

It affects 1 product.

Products include Adobe Creative Cloud Desktop Application.

How do I fix CVE-2022-23202?

No fix has been published for CVE-2022-23202 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-23202 being exploited?

There is no known exploitation of CVE-2022-23202 in the wild and no public exploit code.

Sources

Also known as GHSA-59wj-g52m-96w6.