CVE-2021-40776 — MEDIUM (6.1)

Q: How severe is CVE-2021-40776?

CVE-2021-40776 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2021-40776?

Check the references section above for vendor advisories and patch information. Affected products include: Adobe Lightroom, Apple Macos, Microsoft Windows.

Vulnerability Description

Adobe Lightroom Classic 10.3 (and earlier) are affected by a privilege escalation vulnerability in the Offline Lightroom Classic installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this vulnerability.

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Adobe	Lightroom	< 10.4
Apple	Macos	-
Microsoft	Windows	-

Related Weaknesses (CWE)

CWE-379

References

https://helpx.adobe.com/security/products/lightroom/apsb21-97.htmlPatchVendor Advisory
https://helpx.adobe.com/security/products/lightroom/apsb21-97.htmlPatchVendor Advisory

FAQ

What is CVE-2021-40776?

CVE-2021-40776 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Adobe Lightroom Classic 10.3 (and earlier) are affected by a privilege escalation vulnerability in the Offline Lightroom Classic installer. An authenticated attacker could leverage this vulnerability ...

How severe is CVE-2021-40776?

CVE-2021-40776 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-40776?

Check the references section above for vendor advisories and patch information. Affected products include: Adobe Lightroom, Apple Macos, Microsoft Windows.