CVE-2021-39828

MEDIUM

Adobe Digital Editions < 4.5.11.187646 - Privilege Escalation via Insecure Temporary File Permissions

Title source: llm
STIX 2.1

Description

Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by a privilege escalation vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this vulnerability.

References (1)

Core 1
Core References

Scores

CVSS v3 5.8
EPSS 0.0150
EPSS Percentile 71.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-379
Status published
Products (1)
adobe/digital_editions < 4.5.11.187646
Published Sep 27, 2021
Tracked Since Feb 18, 2026