VDB
CVE-2021-36048
CVE-2021-36048
PUBLISHED
CVSS 7.800000190734863 HIGH
XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.
EPSS 2.70% · 85.8th percentile
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
2.70%
85.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| adobe | xmp_toolkit_software_development_kit | 0 |
| debian | debian_linux | 10.0 |
| Adobe | XMP Toolkit | unspecified, unspecified |
Timeline
- Sep 1, 2021 CVE Published
- Sep 2, 2021 EPSS Score
- Sep 9, 2021 EPSS Score
- Dec 28, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Apr 23, 2022 EPSS Score
- Jun 21, 2022 EPSS Score
- Oct 16, 2022 EPSS Score
- Dec 13, 2022 EPSS Score
- Feb 10, 2023 EPSS Score