VULNERABILITY INTELLIGENCE

CVE-2021-36007

CVSS score3.3 LOW
EPSS probability1.47%
CISA KEVNot currently listed
Published2021-08-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Description

Adobe Prelude version 10.0 (and earlier) are affected by an uninitialized variable vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Weakness classification

  • psirt@adobe.com: CWE-20
  • nvd@nist.gov: CWE-908

Primary references