CVE-2021-39826CWE-78

Adobe Digital Editions Command Execution Vulnerability

High · published September 27, 2021

CVSS v3.1
8.6
EPSS
2%
Percentile
81.3
In the wild
Unconfirmed
What it is

Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User interaction is required to abuse this vulnerability in that a user must open a maliciously crafted .epub file.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02069 · 81.3th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2021-09-27T15:42Z
EPSS history
Timeline
  • 27 SEP 15:42Z
    Adobe Digital Editions Command Execution Vulnerability
    cvelistv5