VULNERABILITY INTELLIGENCE

CVE-2021-39826

CVSS score8.6 HIGH
EPSS probability2.07%
CISA KEVNot currently listed
Published2021-09-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Description

Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User interaction is required to abuse this vulnerability in that a user must open a maliciously crafted .epub file.

Weakness classification

  • psirt@adobe.com: CWE-78
  • nvd@nist.gov: CWE-78

Primary references