VDB
CVE-2021-28548
CVE-2021-28548
PUBLISHED
CVSS 7.800000190734863 HIGH
Adobe Photoshop versions 21.2.6 (and earlier) and 22.3 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted JSX file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
EPSS 22.48% · 95.9th percentile
Risk Scores
CVSS v3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
22.48%
95.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Photoshop | unspecified, unspecified, * |
| adobe | photoshop | 0, 22.0 |
Timeline
- Apr 15, 2021 CVE Published
- Apr 16, 2021 EPSS Score
- Apr 27, 2021 EPSS Score
- Aug 26, 2021 EPSS Score
- Oct 27, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Nov 7, 2022 EPSS Score
- Jan 8, 2023 EPSS Score