=====================================================================

                             CERT-Renater

                 Note d'Information No. 2021/VULN476
_____________________________________________________________________

DATE                : 15/09/2021

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Windows, macOS running Adobe Photoshop Elements
                versions prior to 2021 [build 19.0 (20210811.m.158081)].

=====================================================================
https://helpx.adobe.com/security/products/photoshop_elements/apsb21-77.html
_____________________________________________________________________

Last updated on Sep 14, 2021

Security updates available for Adobe Photoshop Elements | APSB21-77

Bulletin ID      Date Published        Priority

ASPB21-77        September 14, 2021    3


Summary

 Adobe has released updates for Photoshop Elements for Windows and
macOS. These updates resolve a critical  vulnerability.  Successful
exploitation could lead to arbitrary code execution in the context of
the current user.


Affected Versions

Product                Version        Platform

Photoshop Elements 2021 [build 19.0 (20210304.m.156367) and earlier]    
Windows and macOS   


Solution

Adobe categorizes these updates with the following priority ratings and
recommends users to download the new installer and upgrade their
installations.    


Product     Version      Platform      Priority      Availability

Photoshop Elements   2021 [build 19.0 (20210811.m.158081)]
	Windows and macOS        3           Download Center    


Note:

To verify the version of Photoshop Elements on your system, please
follow the following steps:  

    Help
    About Photoshop Elements menu
    The splash screen would show the current version and build number.


Vulnerability details

Vulnerability Category      Vulnerability Impact      Severity
CVSS base score        CVSS vector        CVE Numbers

Out-of-bounds Write (CWE-787)    Arbitrary code execution    Critical
8.8     CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H     CVE-2021-39825


Acknowledgments

Adobe would like to thank Nam Le (khangkito) for
reporting these issues and for working with Adobe to help protect our
customers.   

For more information, visit https://helpx.adobe.com/security.html, or
email PSIRT@adobe.com.


=========================================================
+ CERT-RENATER       |    tel : 01-53-94-20-44          +
+ 23/25 Rue Daviel   |    fax : 01-53-94-20-41          +
+ 75013 Paris        |    email:cert@support.renater.fr +
=========================================================