CVE-2026-113576
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
Adobe Digital Editions is affected by a Path Traversal vulnerability due to improper limitation of a pathname to a restricted directory. An attacker could leverage this to bypass security measures and gain unauthorized write access. Exploitation requires user interaction in that a victim must open a malicious file, and the scope is changed.
Risk Assessment
A user opening a malicious file may allow an attacker to write files outside the intended directory, potentially leading to further escalation or system integrity compromise.
Recommendation
Update Adobe Digital Editions to the latest version. Instruct users not to open files from untrusted sources.
Other vulnerabilities in Adobe Digital Editions
See all- CVE-2017-3091High
Adobe Digital Editions 4.5.4 and earlier versions have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2017-11280High
Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2017-11279High
Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2017-11278High
Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2017-11277High
Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2017-11276High
Adobe Digital Editions 4.5.4 and earlier has an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2017-11275High
Adobe Digital Editions 4.5.4 and earlier has an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2017-11272High
Adobe Digital Editions 4.5.4 and earlier has a security bypass vulnerability.
- CVE-2017-2981High
Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure.
- CVE-2017-2980High
Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure.
Original NVD description (English source)
Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS