CVE-2021-28570
High
Published: 28 June 2021
Published
28 June 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
8.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS Score
0.0077
74.0th percentile
Risk Priority
17
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-28570 is a high-severity Uncontrolled Search Path Element (CWE-427) vulnerability in Adobe After Effects. Its CVSS base score is 8.3 (High).
Operationally, ranked in the top 26.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-15242
Vulnerability details
Adobe After Effects version 18.1 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An unauthenticated attacker could exploit this to to plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
adobe
after effects
≤ 18.1
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.