CVE-2021-39827
Published: 27 September 2021
Summary
CVE-2021-39827 is a medium-severity Creation of Temporary File in Directory with Insecure Permissions (CWE-379) vulnerability in Adobe Digital Editions. Its CVSS base score is 6.5 (Medium).
Operationally, ranked in the top 24.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-26184
Vulnerability details
Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary file write vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to write an arbitrary file to the system. User interaction is required before product…
more
installation to abuse this vulnerability.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.