VULNERABILITY INTELLIGENCE
CVE-2021-21070
CVSS score6.5 MEDIUM
EPSS probability1.60%
CISA KEVNot currently listed
Published2021-04-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Description
Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to the file system could leverage this vulnerability to escalate privileges.
Weakness classification
- psirt@adobe.com: CWE-427
- nvd@nist.gov: CWE-427
Primary references
- psirt@adobe.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory