VULNERABILITY INTELLIGENCE

CVE-2021-40776

CVSS score6.1 MEDIUM
EPSS probability0.54%
CISA KEVNot currently listed
Published2022-06-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Description

Adobe Lightroom Classic 10.3 (and earlier) are affected by a privilege escalation vulnerability in the Offline Lightroom Classic installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this vulnerability.

Weakness classification

  • psirt@adobe.com: CWE-379
  • nvd@nist.gov: NVD-CWE-Other

Primary references