Bulletin ID
Security updates available for Adobe Photoshop Elements | APSB21-77
|
Date Published |
Priority |
---|---|---|
ASPB21-77 |
September 14, 2021 |
3 |
Summary
Adobe has released updates for Photoshop Elements for Windows and macOS. These updates resolve a critical vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Affected Versions
Product |
Version |
Platform |
---|---|---|
Photoshop Elements |
2021 [build 19.0 (20210304.m.156367) and earlier] |
Windows and macOS |
Solution
Adobe categorizes these updates with the following priority ratings and recommends users to download the new installer and upgrade their installations.
Product |
Version |
Platform |
Priority |
Availability |
---|---|---|---|---|
Photoshop Elements |
2021 [build 19.0 (20210811.m.158081)] |
Windows and macOS |
3 |
To verify the version of Photoshop Elements on your system, please follow the following steps:
- Help
- About Photoshop Elements menu
- The splash screen would show the current version and build number.
Vulnerability details
Vulnerability Category |
Vulnerability Impact |
Severity |
CVSS base score |
CVE Numbers |
|
---|---|---|---|---|---|
Out-of-bounds Write (CWE-787) |
Arbitrary code execution |
Critical |
7.8 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
CVE-2021-39825 |
Acknowledgments
Adobe would like to thank Nam Le (khangkito) for reporting these issues and for working with Adobe to help protect our customers.
Revisions
October 4, 2021: Updated CVSS base score and vector for CVE-2021-39825.
For more information, visit https://helpx.adobe.com/security.html, or email PSIRT@adobe.com.