CVE-2020-9724 - Adobe Lightroom versions 9.2.0.10 and earlier have an insecure library loading vulnerability

Back Back to CVE browser

HIGH

Adobe Lightroom versions 9.2.0.10 and earlier have an insecure library loading vulnerability

Published Aug 19, 2020

7.8

HIGH

CVSS 3.1

EPSS 2.74%

Description

Adobe Lightroom versions 9.2.0.10 and earlier have an insecure library loading vulnerability. Successful exploitation could lead to privilege escalation.

Affected products

Vendor Adobe Product Adobe Lightroom Default
n/a
- Version
  9.2.0.10 and earlier versions
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Adobe

Adobe Lightroom

n/a

Version	Status	Constraints
9.2.0.10 and earlier versions	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-427

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30504
Advisory
https://helpx.adobe.com/security/products/lightroom/apsb20-51.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30504		Advisory
https://helpx.adobe.com/security/products/lightroom/apsb20-51.html		x_refsource_CONFIRMVendor Advisory