CVE-2021-39828CWE-379

Adobe Digital Editions Installer flaw leads to Local Privilege Escalation

Medium · published September 27, 2021

CVSS v3.1
5.8
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by a privilege escalation vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this vulnerability.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01503 · 74.1th percentile
Weakness
CWE-379 · Creation of Temporary File in Directory with Insecure Permissions
Published
2021-09-27T15:43Z
EPSS history
Timeline
  • 27 SEP 15:43Z
    Adobe Digital Editions Installer flaw leads to Local Privilege Escalation
    cvelistv5