CVE-2024-34123: adobe premiere_pro Untrusted Search Path
Vulnerability summary
CVE-2024-34123 is a high (CVSS 7.0) Untrusted Search Path vulnerability in adobe premiere_pro. EPSS estimates a 0.30% chance of exploitation in the next 30 days, higher than 21.9% of scored vulnerabilities.
Timeline
- 09-07-2024PublishedVulnerability first disclosed.
- 02-08-2024Last modifiedVulnerability information updated.
Description
Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might execute instead of the legitimate file. This could occur when the application uses a search path to locate executables or libraries. Exploitation of this issue requires user interaction, attack complexity is high.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST7.0HighCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.30%
Chance of exploitation in the next 30 days
Percentile
22%
Versus all other CVEs
30-day change
0.00 pp
From 0.30% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Adobe1 product
- premiere_pro≤ 24.4.1 | < 23.6.7 | ≥ 24.0, < 24.5
1 vendor · 1 product