CVE-2021-28623CWE-379

Adobe Premiere Elements Privilege Escalation Vulnerability

Medium · published June 28, 2021

CVSS v3.0
6.2
EPSS
0%
Percentile
40.2
In the wild
Unconfirmed
What it is

Adobe Premiere Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated attacker could leverage this vulnerability to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.

The record
Technical detail
CVSS v3.0
6.2 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00476 · 40.2th percentile
Weakness
CWE-379 · Creation of Temporary File in Directory with Insecure Permissions
Published
2021-06-28T14:13Z
EPSS history
Timeline
  • 28 JUN 14:13Z
    Adobe Premiere Elements Privilege Escalation Vulnerability
    cvelistv5