[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fENz1hXHwy766M6enLHUFibzzm5wcmsMHx2jkJAkpqzc":3,"g5a-risk:CVE-2021-28606":124},{"success":4,"data":5,"meta":122},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":15,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":57,"references":58,"referencesCount":64,"weaknesses":65,"weaknessesCount":57,"isActivelyExploited":79,"cisaInfo":15,"otxData":15,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":120,"notableEvents":121},"CVE-2021-28606","What is CVE-2021-28606?","Adobe After Effects version 18.2 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","Adobe After Effects version 18.2 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthent...","2021-08-24T18:15:09.693","2023-11-07T03:32:14.733",7.8,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"078d4453-3bcd-4900-85e6-15281da43538","Secondary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH",1.8,5.9,[31],{"Source":32,"Type":33,"CVSSData":34,"BaseSeverity":27,"ExploitabilityScore":41,"ImpactScore":42,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},"nvd@nist.gov","Primary",{"Version":35,"VectorString":36,"AccessVector":37,"AccessComplexity":38,"Authentication":24,"ConfidentialityImpact":39,"IntegrityImpact":39,"AvailabilityImpact":39,"BaseScore":40,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","NETWORK","MEDIUM","COMPLETE",9.3,8.6,10,0.04538,[43,43,43,43,43,43,43],"High",[47,52],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"adobe","after_effects","*","cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"microsoft","windows","-","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",2,[59],{"url":60,"source":61,"tags":62},"https:\u002F\u002Fhelpx.adobe.com\u002Fsecurity\u002Fproducts\u002Fafter_effects\u002Fapsb21-49.html","Adobe",[63],"Vendor Advisory",1,[66,74],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","","Draft","Variant","Simple",{"id":75,"name":76,"description":77,"extendedDescription":70,"status":71,"abstraction":78,"structure":73},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","Base",false,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2021-28606? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-28606, a high severity cyber security vulnerability from 2021. Adobe After Effects version 18.2 (and earlier) is affected ...","CVE-2021-28606, CVE-2021-28606 vulnerability, CVE-2021-28606 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, adobe security, microsoft security, after_effects vulnerability, windows vulnerability","\u002Fwhat-is\u002Fcve-2021-28606",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-28606","Cybersecurity","CVE-2021-28606, CVE-2021-28606 vulnerability, CVE-2021-28606 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107],{"Operator":108,"Negate":15,"Nodes":109},"AND",[110,116],{"Operator":111,"Negate":15,"CPEMatch":112},"OR",[113],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":114,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":115},"F66E877C-C2F5-4BEC-8FF5-D37B7FE89BC8","18.2",{"Operator":111,"Negate":15,"CPEMatch":117},[118],{"Vulnerable":15,"Criteria":56,"MatchCriteriaID":119,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[],{"lastModified":11,"cacheTime":123,"version":35},1793230140402,{"score":125,"band":126,"action":127,"scoredAt":128},47,"Medium","Plan remediation","2026-07-01T10:26:51.950579+00:00"]