CVE-2021-21100

Published: Apr 15, 2021Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: psirt@adobe.com (Secondary)

Description

Adobe Digital Editions version 4.5.11.187245 (and earlier) is affected by a Privilege Escalation vulnerability during installation. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary file system write in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (1)

Products: Adobe: Digital Editions

1 product

Digital Editions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Adobe Digital Editions	Up to 4.5.11.187245

Running on/with	Platform Versions
Apple Macos	All versions

Related CWEs

Creation of Temporary File in Directory with Insecure Permissions

The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file.

References (2)

https://helpx.adobe.com/security/products/Digital-Editions/apsb21-26.html

Source: psirt@adobe.com

Vendor Advisory

https://helpx.adobe.com/security/products/Digital-Editions/apsb21-26.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.