VDB
CVE-2026-21274
CVE-2026-21274
PUBLISHED
CVSS 7.800000190734863 HIGH
Dreamweaver Desktop versions 21.6 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could leverage this vulnerability to bypass security measures and execute unauthorized code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
EPSS 0.07% · 22.5th percentile
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.07%
22.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| adobe | dreamweaver | 0, 0, 0 |
| Adobe | Dreamweaver Desktop | 0, 0 |
Timeline
- Jan 13, 2026 CVE Published
- Jan 13, 2026 CVE Updated
- Jan 14, 2026 EPSS Score
- Jan 17, 2026 EPSS Score
- Jan 20, 2026 EPSS Score
- Jan 23, 2026 EPSS Score
- Jan 26, 2026 EPSS Score
- Jan 29, 2026 EPSS Score
- Feb 1, 2026 EPSS Score
- Feb 4, 2026 EPSS Score
- Feb 7, 2026 EPSS Score
- Feb 10, 2026 EPSS Score