CVE-2021-21047: Adobe Photoshop Out-Of-Bounds Write Vulnerability Could Lead To Remote Code Execution
Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-21047?
CVE-2021-21047 is an Out-of-bounds Write vulnerability in Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) that allows an unauthenticated attacker to achieve arbitrary code execution.
How severe is CVE-2021-21047?
CVE-2021-21047 has a severity rating of 7.8 out of 10, indicating a critical vulnerability.
Which versions of Adobe Photoshop are affected by CVE-2021-21047?
Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by CVE-2021-21047.
How can an attacker exploit CVE-2021-21047?
An unauthenticated attacker can exploit CVE-2021-21047 to achieve arbitrary code execution by leveraging the Out-of-bounds Write vulnerability.
Is Apple macOS and Microsoft Windows affected by CVE-2021-21047?
No, Apple macOS and Microsoft Windows are not vulnerable to CVE-2021-21047.