Skip to content
OpenAdvisories
High · 7.8 CVE-2021-21100 EUVD-2021-8491GHSA-j6mg-g6pw-7wx6

Adobe Digital Editions Arbitrary file system write vulnerability

Published Apr 15, 2021 · Updated Apr 23, 2025 · Assigned by adobe

Description

Adobe Digital Editions version 4.5.11.187245 (and earlier) is affected by a Privilege Escalation vulnerability during installation. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary file system write in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

VendorProductAffectedFixed
Adobe Digital Editions unspecified – ≤ 4.5.11.187245, unspecified – ≤ None —

References