CVE-2021-28570 HIGH

CVE-2021-28570: Adobe After Effects uncontrolled search path element vulnerability could lead to remote code execution

Vendor Adobe
Product After Effects
Weakness CWE-427
Published June 28, 2021
Last update April 23, 2025
View on NVD All CVEs

CVSS base score

8.3/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Adobe After Effects version 18.1 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An unauthenticated attacker could exploit this to to plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction.

Key dates

02Disclosure timeline

June 28, 2021 CVE published
April 23, 2025 Record updated