CVE-2021-40776 MEDIUM

CVE-2021-40776: Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability

Vendor Adobe
Product Lightroom Classic
Weakness CWE-379
Published June 15, 2022
Last update April 23, 2025
View on NVD All CVEs

CVSS base score

6.1/10
Attack vector Physical
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Adobe Lightroom Classic 10.3 (and earlier) are affected by a privilege escalation vulnerability in the Offline Lightroom Classic installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this vulnerability.

Key dates

02Disclosure timeline

June 15, 2022 CVE published
April 23, 2025 Record updated