CVE-2021-21096: falha de média gravidade em Adobe Bridge
Adobe Bridge Genuine Software Service Incorrect Permission Assignment could lead to Denial-of-Service
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.5epss 0.7%
Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Improper Authorization vulnerability in the Genuine Software Service. A low-privileged attacker could leverage this vulnerability to achieve application denial-of-service in the context of the current user. Exploitation of this issue does not require user interaction.
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Adobe · BridgeCVEs relacionadas — Adobe Bridge
No mesmo produto, das mais perigosas para as menos.
CVE-2021-42727HIGHAdobe Bridge Buffer Overflow Arbitrary code executionEPSS 39.4%CVE-2024-20752HIGHZDI-CAN-22653: Adobe Bridge PS File Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 7.8%CVE-2021-36075HIGHAdobe Bridge Buffer Overflow leads to Arbitrary Code ExecutionEPSS 7.5%CVE-2021-36073HIGHAdobe Bridge SGI File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 7.5%CVE-2021-28624HIGHAdobe Bridge SGI File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 7.2%CVE-2024-20755HIGHAdobe Bridge PDF Parsing Heap Memory Corruption Remote Code Execution VulnerabilityEPSS 4.4%