VULNERABILITY INTELLIGENCE
CVE-2021-28597
CVSS score5.5 MEDIUM
EPSS probability0.48%
CISA KEVNot currently listed
Published2021-06-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Description
Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated attacker could leverage this vulnerability to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.
Weakness classification
- psirt@adobe.com: CWE-379
- nvd@nist.gov: CWE-668
Primary references
- psirt@adobe.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory