CVE-2021-28597CWE-379

Adobe Photoshop Elements Privilege Escalation Vulnerability - symbolic link

Medium · published June 28, 2021

CVSS v3.0
6.2
EPSS
0%
Percentile
40.2
In the wild
Unconfirmed
What it is

Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated attacker could leverage this vulnerability to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.

The record
Technical detail
CVSS v3.0
6.2 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00476 · 40.2th percentile
Weakness
CWE-379 · Creation of Temporary File in Directory with Insecure Permissions
Published
2021-06-28T14:13Z
EPSS history
Timeline
  • 28 JUN 14:13Z
    Adobe Photoshop Elements Privilege Escalation Vulnerability - symbolic link
    cvelistv5