Dreamweaver version 20.2 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. Successful exploitation could result in a local user with permissions to write to the file system running system commands with administrator privileges.

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-24425
• https://helpx.adobe.com/security/products/dreamweaver/apsb20-55.html