CVE-2026-113576

MEDIUM
MEDIUM Priority: 0.00 BB Relevance: 38/100
Published: 2026-10-29 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth Integ. Impact Scope Change

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: Required
S: Changed
C: None
I: High
A: None

Description

Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Affected Software (1)

VendorProductVersion
Adobe Adobe Digital Editions 0

Bug Bounty Relevance

38 / 100
✓ No authentication
✓ Low complexity

CVSS Score

6.3 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

mitre ref →
nvd ref →