CVE-2021-21071highCWE-787

CVE-2021-21071: fallo de gravedad alta en Adobe Animate

Adobe Animate memory corruption vulnerability

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Animate

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.8epss 4.6%
Adobe Animate version 21.0.3 (and earlier) is affected by a Memory Corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Productos afectados
Adobe · Animate
CVEs relacionadas — Adobe Animate

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-21077HIGHAdobe Animate heap-based overflow vulnerabilityEPSS 8.3%CVE-2021-28629HIGHAdobe Animate heap corruption vulnerability could lead to arbitrary code executionEPSS 7.8%CVE-2021-28620HIGHAdobe Animate heap corruption vulnerability could lead to arbitrary code executionEPSS 7.8%CVE-2020-9748HIGHStack overflow vulnerability in Adobe Animate 20.5EPSS 6.3%CVE-2020-9750HIGHOut-of-bounds read vulnerability in Adobe Animate 20.5EPSS 4.5%CVE-2021-28621HIGHAdobe Animate FLA File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 4.3%