Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability
CVE-2021-40776

6.1MEDIUM

Key Information:

Vendor
Adobe
Status
Lightroom Classic
Vendor
CVE Published:
15 June 2022

Summary

Adobe Lightroom Classic 10.3 (and earlier) are affected by a privilege escalation vulnerability in the Offline Lightroom Classic installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this vulnerability.

Affected Version(s)

Lightroom Classic <= 10.3

Lightroom Classic <= unspecified

References

https://helpx.adobe.com/security/products/lightroom/apsb2...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.