CVE-2021-39826: high-severity vulnerability in Adobe Digital Editions
Adobe Digital Editions Command Execution Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.6epss 2.1%
Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User interaction is required to abuse this vulnerability in that a user must open a maliciously crafted .epub file.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
Adobe · Digital EditionsRelated CVEs — Adobe Digital Editions
In the same product, most dangerous first.
CVE-2021-21100HIGHAdobe Digital Editions Arbitrary file system write vulnerabilityEPSS 1.7%CVE-2021-39828MEDIUMAdobe Digital Editions Installer flaw leads to Local Privilege EscalationEPSS 1.5%CVE-2021-39827MEDIUMAdobe Digital Editions Installer flaw leads to Arbitrary File System WriteEPSS 1.5%CVE-2023-21582HIGHZDI-CAN-18255: Adobe Digital Editions PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.3%