Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker could exploit this to to plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction.

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-9667
• https://helpx.adobe.com/security/products/integrity_service/apsb20-42.html