CVE-2021-40776: medium-severity vulnerability in Adobe Lightroom Classic
Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.1epss 0.5%
Adobe Lightroom Classic 10.3 (and earlier) are affected by a privilege escalation vulnerability in the Offline Lightroom Classic installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this vulnerability.
CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Affected products
Adobe · Lightroom ClassicRelated CVEs — Adobe Lightroom Classic
In the same product, most dangerous first.
CVE-2026-48397HIGHLightroom Classic | Deserialization of Untrusted Data (CWE-502)EPSS 1.0%CVE-2026-47940HIGHLightroom Classic | Integer Overflow or Wraparound (CWE-190)EPSS 0.3%CVE-2026-48441HIGHLightroom Classic | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 0.3%CVE-2026-48408HIGHLightroom Classic | Out-of-bounds Write (CWE-787)EPSS 0.3%CVE-2026-48409HIGHLightroom Classic | Out-of-bounds Write (CWE-787)EPSS 0.3%CVE-2026-48406HIGHLightroom Classic | Out-of-bounds Write (CWE-787)EPSS 0.3%