CVE-2020-24420: high-severity vulnerability in Adobe Photoshop
Uncontrolled Search Path Element in Adobe Photoshop for Windows
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7epss 0.8%
Adobe Photoshop for Windows version 21.2.1 (and earlier) is affected by an uncontrolled search path element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Adobe · PhotoshopRelated CVEs — Adobe Photoshop
In the same product, most dangerous first.
CVE-2021-21051HIGHAdobe Photoshop Buffer Overflow Vulnerability Could Lead To Remote Code Execution VulnerabilityEPSS 7.7%CVE-2021-36005HIGHAdobe Photoshop PSD File Parsing Stack Overflow VulnerabilityEPSS 6.8%CVE-2021-28548HIGHAdobe Photoshop parsing JS buffer overflow vulnerability could lead to arbitrary code executionEPSS 6.7%CVE-2021-28549HIGHAdobe Photoshop parsing JS buffer overflow vulnerability could lead to arbitrary code executionEPSS 6.5%CVE-2021-21006HIGHHeap buffer overflow when handling crafted font file could lead to arbitrary code executionEPSS 5.9%CVE-2021-36065HIGHAdobe Photoshop Heap-Based Buffer Overflow Could Lead To Arbitrary Code ExecutionEPSS 5.7%