CVE-2020-24447CWE-427
Uncontrolled Search Path Element vulnerability in Lightroom Classic 10.0
High · published December 11, 2020
What it is
Adobe Lightroom Classic version 10.0 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
The record
Technical detail
- CVSS v3.1
- 7.0 · HIGH
- Vector
- CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00788 · 55.7th percentile
- Weakness
- CWE-427 · Uncontrolled Search Path Element
- Published
- 2020-12-11T02:15Z
EPSS history
Timeline