Adobe Premiere Elements Uncontrolled Search Path Element Privilege Escalation
CVE-2022-34235

7.8HIGH

Key Information:

Vendor
Adobe
Status
Premiere Elements
Vendor
CVE Published:
11 August 2022

Summary

Adobe Premiere Elements version 2020v20 (and earlier) is affected by an Uncontrolled Search Path Element which could lead to Privilege Escalation. An attacker could leverage this vulnerability to obtain admin using an existing low-privileged user. Exploitation of this issue does not require user interaction.

Affected Version(s)

Premiere Elements <= 2020v20

Premiere Elements <= unspecified

References

https://helpx.adobe.com/security/products/premiere_elemen...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.