CVE-2021-42526

Adobe Premiere Elements 2021 builds (e.g., 20210809.daily.2242976 and earlier) are affected by a memory corruption vulnerability in the handling of a malicious file, potentially allowing arbitrary code execution in the user’s context after user interaction. Exploitation requires opening a rogue f...

CVE-2021-40787

CVE-2021-40787 affects Adobe Premiere Elements 2021 build 19.0 and earlier (e.g., 20210809.daily.2242976). The vulnerability is a memory corruption issue stemming from insecure handling of a malicious file, potentially allowing arbitrary code execution in the current user context. Exploitation re...

CVE-2021-40785

Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this to cause an application denial-of-service in the context of the current user, with exploitati...

CVE-2021-42527

CVE-2021-42527 affects Adobe Premiere Elements 2021 (build 19.0 daily 20210809.2242976) and earlier, due to a memory corruption vulnerability from insecure handling of a malicious file. Exploitation could lead to arbitrary code execution in the user’s context, requiring user interaction to open a...

CVE-2021-40789

CVE-2021-40789 : Adobe Premiere Elements 20210809.daily.2242976 and earlier are affected by a null pointer dereference when parsing a specially crafted file, allowing an unauthenticated attacker to cause an application denial-of-service in the context of the current user. Exploitation requires us...

CVE-2021-40788

Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file, allowing an unauthenticated attacker to cause application DoS in the context of the current user. Exploitation requires user interaction (vic...

CVE-2021-40786

Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially allowing arbitrary code execution in the current user context. Exploitation requires user interaction. A remediation is available...

CVE-2021-40703

CVE-2021-40703 affects Adobe Premiere Elements 2021.2235820 and earlier. A memory corruption vulnerability arises from insecure handling of a malicious m4a file, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction. The issue is ...

CVE-2022-34235

CVE-2022-34235 affects Adobe Premiere Elements versions 2020v20 and earlier. The issue is an Uncontrolled Search Path Element that could allow Privilege Escalation, enabling an attacker with a low-privileged user to obtain admin privileges without user interaction. The vulnerability is documented...

CVE-2021-39824

CVE-2021-39824 affects Adobe Premiere Elements 2021.2235820 and earlier, caused by memory corruption from insecure handling of a malicious PNG file, enabling arbitrary code execution in the caller’s context. Exploitation requires user interaction and is tied to a local/renderer path described in ...

CVE-2021-40700

CVE-2021-40700 affects Adobe Premiere Elements 2021.2235820 (and earlier) via a memory corruption vulnerability from insecure TIFF handling, potentially allowing arbitrary code execution with user interaction. Adobe released APSB21-78 addressing multiple vulnerabilities; updates for Windows/macOS...

CVE-2021-28623

Adobe Premiere Elements 5.2 and earlier are affected by an insecure temporary file creation vulnerability that allows privilege escalation. The root cause is the creation of temporary files in directories with incorrect permissions, enabling an unauthenticated attacker to call installer functions...

CVE-2021-40702

CVE-2021-40702 affects Adobe Premiere Elements 2021.2235820 and earlier. It is a memory corruption vulnerability caused by insecure handling of a malicious PSD file, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction. Related a...

CVE-2021-40701

CVE-2021-40701 concerns Adobe Premiere Elements. A memory corruption vulnerability affects versions 2021.2235820 and earlier due to insecure handling of a malicious m4a file, potentially enabling arbitrary code execution in the current user context. User interaction is required to exploit, and th...