title: Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability
description: Adobe Lightroom Classic 10.3 (and earlier) are affected by a privilege escalation vulnerability in the Offline Lightroom Classic installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this vulnerability.
problem types: Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)
affected:
{
vendor: Adobe
product: Lightroom Classic
versions:
version: unspecified, lessThanOrEqual: 10.3, status: affected, versionType: custom
version: unspecified, lessThanOrEqual: None, status: affected, versionType: custom
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
attackVector: PHYSICAL
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 6.1
baseSeverity: MEDIUM
]