CVE-2020-9668 is an improper access control vulnerability in Adobe Genuine Service version 6.6 and earlier, affecting Adobe, Apple, and Microsoft Genuine Service on macOS and Windows. An unauthenticated attacker can exploit this via symbolic links to elevate privileges in the context of the current user. With a CVSS score of 7.8 (HIGH), it has a low attack complexity and can lead to high impacts on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it has garnered some community discussion and media coverage, indicating awareness of the flaw.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 6.6CPE matchmatch criteria | cpe:2.3:a:adobe:genuine_service:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.