{"id":"CVE-2021-28597","aliases":["EUVD-2021-15266","GHSA-p6gc-38cf-8626"],"status":"published","title":"Adobe Photoshop Elements Privilege Escalation Vulnerability - symbolic link","description":"Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated attacker could leverage this vulnerability to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.","severity":{"version":"3.0","score":6.2,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00476,"percentile":0.41616,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-379","CWE-668"],"published":"2021-06-28T14:13:20Z","modified":"2026-06-17T03:46:36Z","products":[{"vendor":"adobe","product":"photoshop elements"},{"vendor":"adobe","product":"photoshop_elements"}],"references":[{"url":"https://helpx.adobe.com/security/products/photoshop_elements/apsb21-46.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28597"},{"url":"https://github.com/advisories/GHSA-p6gc-38cf-8626"}],"sources":{"cve":[{"id":"CVE-2021-28597","title":"Adobe Photoshop Elements Privilege Escalation Vulnerability - symbolic link","description":"Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated attacker could leverage this vulnerability to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.","status":"published","published":"2021-06-28T14:13:20.585Z","modified":"2025-04-23T19:39:59.837Z","cvss":[{"version":"3.0","score":6.2,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-379"],"updated_at":"2026-11-02T14:33:08.811269Z"}],"euvd":[{"id":"EUVD-2021-15266","description":"Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated attacker could leverage this vulnerability to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.","status":"published","published":"2021-06-28T14:13:20Z","modified":"2025-04-23T19:39:59Z","cvss":[{"version":"3.0","score":6.2,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:05.855584Z"}],"ghsa":[{"id":"GHSA-p6gc-38cf-8626","title":"Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file...","description":"Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated attacker could leverage this vulnerability to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.","status":"published","published":"2022-05-24T19:06:24Z","modified":"2023-01-31T05:08:46Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-379","CWE-668"],"updated_at":"2026-11-02T14:49:27.100963Z"}],"nvd":[{"id":"CVE-2021-28597","description":"Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated attacker could leverage this vulnerability to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.","status":"published","published":"2021-06-28T15:15:23.683Z","modified":"2026-06-17T03:46:36.343Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":6.2,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-379","CWE-668"],"updated_at":"2026-11-02T14:06:55.259633Z"}]}}