https://helpx.adobe.com/security/products/Digital-Editions/apsb21-80.html

Adobe Digital Editions version 4.5.11.187646 (and earlier) is affected by multiple vulnerabilities, as follows:

  - An OS command injection vulnerability that can be exploited by a local attacker to execute arbitrary     code. (CVE-2021-39826)

  - An arbitrary file system write vulnerability that can be exploited by a local attacker. (CVE-2021-39827)

  - A privilege escalation vulnerability that can be exploited by a local attacker. (CVE-2021-39828)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version   number.

CVE-2021-39827

medium

Tenable Plugins

high