CVE-2021-39828

CWE-3793 documents3 sources
Severity
6.5MEDIUM
EPSS
1.0%
top 22.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Digital Editions
Timeline
PublishedSep 27
Latest updateMay 24

Description

Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by a privilege escalation vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this vulnerability.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:NExploitability: 0.6 | Impact: 5.2

Affected Packages2 packages

▶CVEListV5adobe/digital_editionsunspecified — 4.5.11.187646+1
▶NVDadobe/digital_editions4.5.11.187646

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-q89f-4fm5-5x46: Adobe Digital Editions 4↗2022-05-24
▶
CVEList
Adobe Digital Editions Installer flaw leads to Local Privilege Escalation↗2021-09-27
▶
CVE-2021-39828 (MEDIUM CVSS 6.5) | Adobe Digital Editions 4.5.11.18764 | cvebase.io