CVE-2021-39828: Adobe Digital Editions Installer flaw leads to Local Privilege Escalation
Published Sep 27, 2021
·Updated
Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by a privilege escalation vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this vulnerability.
Affected Software
4 affected components
Adobe Digital Editions<=4.5.11.187646
Apple macOS
All of the following
Adobe Digital Editions<=4.5.11.187646
Apple macOS
Event History
Sep 27, 2021
CVE Published
via MITRE·03:43 PM
Data Sourced
via MITRE·03:43 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-39828?
CVE-2021-39828 is a privilege escalation vulnerability in Adobe Digital Editions 4.5.11.187646 (and earlier) installer.
2
How does CVE-2021-39828 affect Adobe Digital Editions?
CVE-2021-39828 allows an authenticated attacker to escalate privileges in Adobe Digital Editions.
3
Is user interaction required to exploit CVE-2021-39828?
Yes, user interaction is required before product installation to abuse CVE-2021-39828.
4
What is the severity of CVE-2021-39828?
CVE-2021-39828 has a severity value of 6.5 (medium).
5
How do I fix CVE-2021-39828 in Adobe Digital Editions?
To fix CVE-2021-39828 in Adobe Digital Editions, update to version 4.5.12 or later.