CVE-2021-42735: high-severity vulnerability in Adobe Photoshop
Adobe Photoshop Memory Corruption could lead to Arbitrary code execution
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 2.2%
Adobe Photoshop version 22.5.1 (and earlier versions ) is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Adobe · PhotoshopRelated CVEs — Adobe Photoshop
In the same product, most dangerous first.
CVE-2021-21051HIGHAdobe Photoshop Buffer Overflow Vulnerability Could Lead To Remote Code Execution VulnerabilityEPSS 7.7%CVE-2021-36005HIGHAdobe Photoshop PSD File Parsing Stack Overflow VulnerabilityEPSS 6.8%CVE-2021-28548HIGHAdobe Photoshop parsing JS buffer overflow vulnerability could lead to arbitrary code executionEPSS 6.7%CVE-2021-28549HIGHAdobe Photoshop parsing JS buffer overflow vulnerability could lead to arbitrary code executionEPSS 6.5%CVE-2021-21006HIGHHeap buffer overflow when handling crafted font file could lead to arbitrary code executionEPSS 5.9%CVE-2021-36065HIGHAdobe Photoshop Heap-Based Buffer Overflow Could Lead To Arbitrary Code ExecutionEPSS 5.7%