CVE-2021-21008
High
Published: 13 January 2021
Published
13 January 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.0113
78.7th percentile
Risk Priority
15
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-21008 is a high-severity Uncontrolled Search Path Element (CWE-427) vulnerability in Adobe Animate. Its CVSS base score is 7.0 (High).
Operationally, ranked in the top 21.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-8417
Vulnerability details
Adobe Animate version 21.0 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must…
more
open a malicious file.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
adobe
animate
≤ 21.0
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.