CVE-2021-42272

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious GIF file.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Nov 18, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-422746.8Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability CVE-2021-422758.8Microsoft COM for Windows Remote Code Execution Vulnerability CVE-2021-422767.8Microsoft Windows Media Foundation Remote Code Execution Vulnerability CVE-2021-422775.5Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability CVE-2021-422787.5Active Directory Domain Services Elevation of Privilege Vulnerability CVE-2021-422794.2Chakra Scripting Engine Memory Corruption Vulnerability CVE-2021-42287.4Use of hard-coded TLS certificate by default allows an attacker to perform Man-in-the-Middle (MitM) attacks even in the presence of the HTTP CVE-2021-422805.5Windows Feedback Hub Elevation of Privilege Vulnerability CVE-2021-422827.5Active Directory Domain Services Elevation of Privilege Vulnerability CVE-2021-422838.8NTFS Elevation of Privilege Vulnerability CVE-2021-422846.8Windows Hyper-V Denial of Service Vulnerability CVE-2021-422857.8Windows Kernel Elevation of Privilege Vulnerability