CVE-2021-42735

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Adobe Photoshop version 22.5.1 (and earlier versions ) is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-788

Affected software

No affected versions have been published.

Timeline

Published: Jun 15, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-427377.8Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, CVE-2021-427387.8Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious MXF file, CVE-2021-427396.7The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers CVE-2021-42746.1A vulnerability, which was classified as problematic, has been found in sileht bird-lg. This issue affects some unknown processing of the fi CVE-2021-427409.8The shell-quote package before 1.7.3 for Node.js allows command injection. An attacker can inject unescaped shell metacharacters through a r CVE-2021-427437.8A misconfiguration in the node default path allows for local privilege escalation from a lower privileged user to the Splunk user in Splunk CVE-2021-427445.5Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized a CVE-2021-427485.3In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API.CVE-2021-427495.3In Beaver Themer, attackers can bypass conditional logic controls (for hiding content) when viewing the post archives. Exploitation requires CVE-2021-42758.8A vulnerability, which was classified as problematic, was found in katlings pyambic-pentameter. Affected is an unknown function. The manipul CVE-2021-427504.8A cross-site scripting (XSS) vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers (with administrative access) to injec CVE-2021-427514.8A cross-site scripting (XSS) vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers (with administrative access) to injec