CVE-2026-71381

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-71381", "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538", "state": "PUBLISHED", "assignerShortName": "adobe", "dateReserved": "2026-08-06T09:00:49.999Z", "datePublished": "2026-08-07T20:26:30.681Z", "dateUpdated": "2026-08-17T15:02:03.308Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "078d4453-3bcd-4900-85e6-15281da43538", "shortName": "adobe", "dateUpdated": "2026-08-17T15:02:03.308Z"}, "title": "Adobe Genuine Software Integrity Service | CWE-863 Incorrect Authorization", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-863", "description": "CWE-863 Incorrect Authorization", "type": "CWE"}]}], "affected": [{"vendor": "Adobe", "product": "Adobe Genuine Software Integrity Service", "platforms": ["Windows"], "versions": [{"status": "affected", "version": "0", "lessThan": "10.1.0.33", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction, but requires the attacker to access the target desktop system locally (e.g., keyboard, console), or remotely (e.g., SMB).", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction, but requires the attacker to access the target desktop system locally (e.g., keyboard, console), or remotely (e.g., SMB)."}]}], "references": [{"url": "https://helpx.adobe.com/genuine/adobe-genuine-service.html"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}}], "solutions": [{"lang": "en", "value": "No action is required of Adobe app users to received the fixed version of AGS; it receives automatic updates.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "No action is required of Adobe app users to received the fixed version of AGS; it receives automatic updates."}]}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-07T20:50:34.835323Z", "id": "CVE-2026-71381", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-07T21:01:43.262Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-71381", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-07T20:50:34.835323Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-07T20:50:39.851Z"}}], "cna": {"title": "Adobe Genuine Software Integrity Service | CWE-863 Incorrect Authorization", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Adobe", "product": "Adobe Genuine Software Integrity Service", "versions": [{"status": "affected", "version": "0", "lessThan": "10.1.0.33", "versionType": "semver"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "No action is required of Adobe app users to received the fixed version of AGS; it receives automatic updates.", "supportingMedia": [{"type": "text/html", "value": "No action is required of Adobe app users to received the fixed version of AGS; it receives automatic updates.", "base64": false}]}], "references": [{"url": "https://helpx.adobe.com/genuine/adobe-genuine-service.html"}], "x_generator": {"engine": "Vulnogram 1.0.4"}, "descriptions": [{"lang": "en", "value": "Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction, but requires the attacker to access the target desktop system locally (e.g., keyboard, console), or remotely (e.g., SMB).", "supportingMedia": [{"type": "text/html", "value": "Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction, but requires the attacker to access the target desktop system locally (e.g., keyboard, console), or remotely (e.g., SMB).", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-863", "description": "CWE-863 Incorrect Authorization"}]}], "providerMetadata": {"orgId": "078d4453-3bcd-4900-85e6-15281da43538", "shortName": "adobe", "dateUpdated": "2026-08-17T15:02:03.308Z"}}}, "cveMetadata": {"cveId": "CVE-2026-71381", "state": "PUBLISHED", "dateUpdated": "2026-08-17T15:02:03.308Z", "dateReserved": "2026-08-06T09:00:49.999Z", "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538", "datePublished": "2026-08-07T20:26:30.681Z", "assignerShortName": "adobe"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Windows"], "product": "Adobe Genuine Software Integrity Service", "vendor": "Adobe", "versions": [{"lessThan": "10.1.0.33", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "psirt@adobe.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Adobe Genuine Software Integrity Service on Windows is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction, but requires the attacker to access the target desktop system locally (e.g., keyboard, console), or remotely (e.g., SMB)."}, {"lang": "es", "value": "Adobe Genuine Software Integrity Service fue afectado por una vulnerabilidad de autorizaci\u00f3n incorrecta que podr\u00eda resultar en una elusi\u00f3n de caracter\u00edstica de seguridad. Un atacante podr\u00eda haber aprovechado esta vulnerabilidad para eludir medidas de seguridad y obtener acceso de escritura limitado no autorizado. La explotaci\u00f3n de este problema no requiri\u00f3 interacci\u00f3n del usuario, pero requiri\u00f3 que el atacante tuviera acceso al entorno local donde la aplicaci\u00f3n est\u00e1 instalada."}], "id": "CVE-2026-71381", "lastModified": "2026-10-24T15:10:00.190", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 1.4, "source": "psirt@adobe.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-71381", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-07T20:50:34.835323Z", "version": "2.0.3"}}]}, "published": "2026-08-07T21:17:30.147", "references": [{"source": "psirt@adobe.com", "url": "https://helpx.adobe.com/genuine/adobe-genuine-service.html"}], "sourceIdentifier": "psirt@adobe.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-863"}], "source": "psirt@adobe.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 81.0, "confidence_source": "matching", "scores": [{"score": 81.0, "source": "matching"}]}, "original": {"product": "Adobe Genuine Software Integrity Service", "source": "cna", "vendor": "Adobe"}, "product": "genuine_integrity_service", "vendor": "adobe"}], "created": "2026-08-07T22:00:07.179702+00:00", "updated": "2026-08-17T20:45:17.274127+00:00", "vendors": ["adobe", "adobe$PRODUCT$genuine_integrity_service"]}