Lucene search

K
AdobePhotoshop Elements

6 matches found

CVE
CVE
added 2007/04/30 10:19 p.m.138 views

CVE-2007-2365

Buffer overflow in Adobe Photoshop CS2 and CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file.

9.3CVSS7.5AI score0.66801EPSS
CVE
CVE
added 2025/02/11 6:15 p.m.53 views

CVE-2025-21162

Photoshop Elements versions 2025.0 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction in that a victim must ...

5.5CVSS5.5AI score0.00026EPSS
CVE
CVE
added 2021/09/27 4:15 p.m.52 views

CVE-2021-39825

Photoshop Elements versions 2021 build 19.0 (20210304.m.156367) (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a mali...

7.8CVSS7.8AI score0.09446EPSS
CVE
CVE
added 2009/09/30 3:30 p.m.50 views

CVE-2009-3489

Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) res...

7.8CVSS8AI score0.00231EPSS
CVE
CVE
added 2021/06/28 3:15 p.m.42 views

CVE-2021-28597

Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated attacker could leverage this vulnerability to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require ...

6.2CVSS5.4AI score0.00215EPSS
CVE
CVE
added 2011/10/04 8:55 p.m.41 views

CVE-2011-2443

Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted (1) .grd or (2) .abr file, a related issue to CVE-2010-1296.

9.3CVSS8.2AI score0.55299EPSS