Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:lightroom_desktop:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductLightroom Desktop (fa15b144-da0f-5a38-9c64-d21e5d5fb5d5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-21349 vulnerable 2026-06-08 07:49:15.451059 Lightroom Desktop | Out-of-bounds Write (CWE-787)
HIGH (7.8)
Lightroom Desktop versions 15.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2026-02-10T19:43:23.584Z
Updated: 2026-02-26T14:44:28.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27197 vulnerable 2026-06-08 07:14:54.460324 Lightroom Desktop | Out-of-bounds Write (CWE-787)
HIGH (7.8)
Lightroom Desktop versions 8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2025-05-13T17:13:06.343Z
Updated: 2025-05-13T17:34:46.860Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45145 vulnerable 2026-06-08 06:45:55.417672 Lightroom Desktop | Out-of-bounds Read (CWE-125)
MEDIUM (5.5)
Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2024-10-09T09:42:08.760Z
Updated: 2024-10-09T13:19:21.497Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20754 vulnerable 2026-06-08 06:27:30.482349 Lightroom Desktop | Untrusted Search Path (CWE-426)
HIGH (7.8)
Lightroom Desktop versions 7.1.2 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2024-03-18T17:12:20.105Z
Updated: 2024-12-12T16:49:06.247Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43753 vulnerable 2026-06-08 05:36:43.929769 Adobe Lightroom TIF File Parsing Use-After-Free Information Disclosure Vulnerability
HIGH (7.8)
Adobe Lightroom versions 4.4 (and earlier) are affected by a use-after-free vulnerability in the processing of parsing TIF files that could result in privilege escalation. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2023-09-07T12:54:30.742Z
Updated: 2025-02-27T21:00:10.697Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.