Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:lightroom:*:*:*:*:classic:*:*:*
part: a version: * update: *
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Lightroom (798637a3-f759-5cff-9852-db630916a7f5) |
| Edition | * |
| Language | * |
| Software edition | classic |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-21349 |
vulnerable | 2026-06-08 07:49:15.452150 |
Lightroom Desktop | Out-of-bounds Write (CWE-787)
HIGH (7.8)
Lightroom Desktop versions 15.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2026-02-10T19:43:23.584Z
Updated: 2026-02-26T14:44:28.867Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45145 |
vulnerable | 2026-06-08 06:45:55.419427 |
Lightroom Desktop | Out-of-bounds Read (CWE-125)
MEDIUM (5.5)
Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2024-10-09T09:42:08.760Z
Updated: 2024-10-09T13:19:21.497Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40776 |
vulnerable | 2026-06-08 05:35:19.044821 |
Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability
MEDIUM (6.1)
Adobe Lightroom Classic 10.3 (and earlier) are affected by a privilege escalation vulnerability in the Offline Lightroom Classic installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this vulnerability.
Published: 2022-06-15T18:35:47.884Z
Updated: 2025-04-23T18:14:55.067Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9724 |
vulnerable | 2026-06-08 05:28:02.676717 |
Details available
Adobe Lightroom versions 9.2.0.10 and earlier have an insecure library loading vulnerability. Successful exploitation could lead to privilege escalation.
Published: 2020-08-19T14:16:38.000Z
Updated: 2024-08-04T10:43:03.607Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24447 |
vulnerable | 2026-06-08 05:22:33.122941 |
Uncontrolled Search Path Element vulnerability in Lightroom Classic 10.0
HIGH (7)
Adobe Lightroom Classic version 10.0 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2020-12-11T02:15:00.161Z
Updated: 2024-09-17T03:12:39.698Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.