CVE-2021-21011

CVE-2021-21011 describes an Adobe Captivate 2019 (and earlier) local privilege-escalation due to an uncontrolled search path element. The vulnerability affects the Captivate executable’s search path handling, allowing a user with filesystem rights to escalate privileges. The CVE’s base info from ...

CVE-2021-21011 Uncontrolled Search Path Element in Adobe Captivate 2019

Adobe Captivate 2019 version 11.5.1.499 and earlier is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with permissions to write to the file system could leverage this vulnerability to escalate privileges...

CVE-2021-21011 Uncontrolled Search Path Element in Adobe Captivate 2019

Adobe Captivate 2019 version 11.5.1.499 and earlier is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with permissions to write to the file system could leverage this vulnerability to escalate privileges...

Adobe Captivate 2019 Uncontrolled Search Path Element Vulnerability

Adobe Captivate 2019 is a screen recording software. An uncontrolled search path element vulnerability exists in Adobe Captivate 2019 11.5.1.499 and earlier versions. An attacker can exploit the vulnerability to elevate privileges...

Adobe Animate Uncontrolled Search Path Element Vulnerability

Adobe Animate is a multimedia authoring and computer animation program. An uncontrolled search path element vulnerability exists in Adobe Animate 21.0 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Illustrator 2020 Uncontrolled Search Path Element Vulnerability

Adobe Illustrator 2020 is a vector graphics editor. An uncontrolled search path element vulnerability exists in Adobe Illustrator 2020 25.0 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...

CVE-2021-21010

InCopy version 15.1.1 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Animate 代码问题漏洞

Adobe Animate is a multimedia authoring and computer animation program. An uncontrolled search path element vulnerability exists in Adobe Animate 21.0 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Captivate 代码问题漏洞

Adobe Captivate 2019 is a screen recording software. An uncontrolled search path element vulnerability exists in Adobe Captivate 2019 11.5.1.499 and earlier versions. An attacker can exploit the vulnerability to elevate privileges...

Adobe Illustrator 代码问题漏洞

Adobe Illustrator 2020 is a vector graphics editor. An uncontrolled search path element vulnerability exists in Adobe Illustrator 2020 25.0 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...

Adobe Incopy 代码问题漏洞

Adobe InCopy is a professional word processing program from Adobe that is integrated with Adobe InDesign. An uncontrolled search path element vulnerability exists in Adobe InCopy 15.1.3 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

postgresql: Uncontrolled search path element in logical replication

A flaw was found in PostgreSQL, where it did not properly sanitize the searchpath during logical replication. This flaw allows an authenticated attacker to use this flaw in an attack similar to CVE-2018-1058 to execute an arbitrary SQL command in the user's context for replication. The highest...

postgresql: Uncontrolled search path element in CREATE EXTENSION

A flaw was found in PostgreSQL, where some PostgreSQL extensions did not use the searchpath safely in their installation script. This flaw allows an attacker with sufficient privileges to trick an administrator into executing a specially crafted script during the extension's installation or updat...

CVE-2020-24447

Adobe Lightroom Classic version 10.0 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2020-24440

Adobe Prelude version 9.0.1 and earlier is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2020-24440

Adobe Prelude version 9.0.1 and earlier is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2020-24447

Adobe Lightroom Classic version 10.0 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Design/Logic Flaw

Adobe Prelude version 9.0.1 and earlier is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2020-24440

Summary of CVE-2020-24440 : Adobe Prelude on Windows (versions

CVE-2020-24440 Uncontrolled Search Path Element in Adobe Prelude for Windows

Adobe Prelude version 9.0.1 and earlier is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...