CVE-2021-39827

Published: Sep 27, 2021Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Exploitability: 0.6 / Impact: 5.9

Source: psirt@adobe.com (Secondary)

Description

Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary file write vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to write an arbitrary file to the system. User interaction is required before product installation to abuse this vulnerability.

Affected (1)

Products: Adobe: Digital Editions

1 product

Digital Editions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Adobe Digital Editions	Up to 4.5.11.187646

Running on/with	Platform Versions
Apple Macos	All versions

Related CWEs

Creation of Temporary File in Directory with Insecure Permissions

The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file.

References (2)

https://helpx.adobe.com/security/products/Digital-Editions/apsb21-80.html

Source: psirt@adobe.com

PatchVendor Advisory

https://helpx.adobe.com/security/products/Digital-Editions/apsb21-80.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.