CVE-2021-40776— Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-40776
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
Adobe Lightroom Classic 10.3 (and earlier) are affected by a privilege escalation vulnerability in the Offline Lightroom Classic installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this vulnerability.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
在具有不安全权限的目录中创建临时文件
Source: NVD (National Vulnerability Database)
Vulnerability Title
Adobe Lightroom Classic 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Adobe Lightroom Classic是美国奥多比（Adobe）公司的一套图形处理软件。 Adobe Lightroom Classic存在安全漏洞，该漏洞的存在是由于在目录中创建了权限不正确的临时文件，导致绕过安全限制和权限升级。该漏洞允许远程攻击者可利用该漏洞升级系统上的特权。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Adobe | Lightroom Classic | unspecified ~ 10.3 | - |
II. Public POCs for CVE-2021-40776
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-40776
请登录查看更多情报信息。
Same Patch Batch · Adobe · 2022-06-15 · 27 CVEs total
| CVE-2021-40727 | 7.8 HIGH | Adobe InDesign crashes when parsing the TIF file |
| CVE-2021-42732 | 7.8 HIGH | Adobe InDesign crashes when parsing the GIF file |
| CVE-2021-43754 | 7.8 HIGH | Adobe Prelude Corruption could lead to Arbitrary code execution |
| CVE-2021-43756 | 7.8 HIGH | Adobe Media Encoder Memory Corruption Vulnerability could lead to Remote Code Execution |
| CVE-2021-39820 | 7.8 HIGH | Adobe InDesign Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution |
| CVE-2022-30649 | 7.8 HIGH | Adobe Illustrator Out-of-bounds Write could lead to Arbitrary code execution |
| CVE-2021-43755 | 7.8 HIGH | Adobe After Effects Memory Corruption could lead to Arbitrary Code Execution |
| CVE-2021-42735 | 7.8 HIGH | Adobe Photoshop Memory Corruption could lead to Arbitrary code execution |
| CVE-2022-30669 | 5.5 MEDIUM | Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory Leak |
| CVE-2022-30668 | 5.5 MEDIUM | Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory Leak |
| CVE-2022-30667 | 5.5 MEDIUM | Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory Leak |
| CVE-2022-30666 | 5.5 MEDIUM | Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory Leak |
| CVE-2022-28850 | 5.5 MEDIUM | Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
| CVE-2022-28848 | Adobe Bridge PCX Out-of-bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-28849 | Adobe Bridge Font Parsing Use-After-Free Remote Code Execution Vulnerability | |
| CVE-2022-28847 | Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-28846 | Adobe Bridge SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-28845 | Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-28844 | Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-30647 | Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution Vulnerability |
Showing top 20 of 27 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: Adobe
- CVE-2026-34632
Photoshop Installer | CWE-427: Uncontrolled Search Path Elem - CVE-2026-27297
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27300
Adobe Framemaker | Access of Uninitialized Pointer (CWE-824) - CVE-2026-27296
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27290
Adobe Framemaker | Untrusted Search Path (CWE-426)
V. Comments for CVE-2021-40776
No comments yet