CVE-2021-40708

Katalog CVE

CVSS 7.3 · High EPSS 1,7%

Kerentanan Creation of Temporary File in Directory with Insecure Permissions pada adobe genuine service. Skor CVSS 3.1 7.3 (High) menurut adobe.com.

Deskripsi (NVD)

Adobe Genuine Service versions 7.3 (and earlier) are affected by a privilege escalation vulnerability in the AGSService installer. An authenticated attacker could leverage this vulnerability to achieve read / write privileges to execute arbitrary code. User interaction is required to abuse this vulnerability.

Rincian

Terbit di NVD

29 September 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.3 (High), sumber adobe.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-379: Creation of Temporary File in Directory with Insecure Permissions

EPSS (30 hari)

1,7% peluang dieksploitasi; lebih tinggi dari 76,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://helpx.adobe.com/security/products/integrity_service/apsb21-81.html advisory vendor