CVE-2021-40776CWE-379

Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability

Medium · published June 15, 2022

CVSS v3.1
6.1
EPSS
1%
Percentile
44.5
In the wild
Unconfirmed
What it is

Adobe Lightroom Classic 10.3 (and earlier) are affected by a privilege escalation vulnerability in the Offline Lightroom Classic installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this vulnerability.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00537 · 44.5th percentile
Weakness
CWE-379 · Creation of Temporary File in Directory with Insecure Permissions
Published
2022-06-15T18:35Z
EPSS history
Timeline
  • 15 JUN 18:35Z
    Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability
    cvelistv5