CVE-2021-21100: high-severity vulnerability in Adobe Digital Editions
Adobe Digital Editions Arbitrary file system write vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 1.7%
Adobe Digital Editions version 4.5.11.187245 (and earlier) is affected by a Privilege Escalation vulnerability during installation. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary file system write in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Adobe · Digital EditionsRelated CVEs — Adobe Digital Editions
In the same product, most dangerous first.
CVE-2021-39826HIGHAdobe Digital Editions Command Execution VulnerabilityEPSS 2.1%CVE-2021-39828MEDIUMAdobe Digital Editions Installer flaw leads to Local Privilege EscalationEPSS 1.5%CVE-2021-39827MEDIUMAdobe Digital Editions Installer flaw leads to Arbitrary File System WriteEPSS 1.5%CVE-2023-21582HIGHZDI-CAN-18255: Adobe Digital Editions PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%