Vulnerability Details : CVE-2021-40776
Adobe Lightroom Classic 10.3 (and earlier) are affected by a privilege escalation vulnerability in the Offline Lightroom Classic installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this vulnerability.
Vulnerability category: Gain privilege
Products affected by CVE-2021-40776
Exploit prediction scoring system (EPSS) score for CVE-2021-40776
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 21 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-40776
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.6
|
MEDIUM | AV:L/AC:M/Au:S/C:C/I:C/A:C |
2.7
|
10.0
|
NIST | |
|
6.1
|
MEDIUM | CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H |
0.2
|
5.9
|
NIST | |
|
6.1
|
MEDIUM | CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H |
0.2
|
5.9
|
Adobe Systems Incorporated |
CWE ids for CVE-2021-40776
-
The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file.Assigned by: psirt@adobe.com (Secondary)
References for CVE-2021-40776
-
https://helpx.adobe.com/security/products/lightroom/apsb21-97.html
Adobe Security BulletinPatch;Vendor Advisory
Jump to