cvedb.io
CVE-2021-40719
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2021-10-21T20:15:08.337 · Last modified 2026-06-17T04:07:19.557

Summary

Adobe Connect version 11.2.3 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary method invocation when AMF messages are deserialized on an Adobe Connect server. An attacker can leverage this to execute remote code execution on the server.

Affected products

adobe — connect

Does this affect you?

Add your gear to cvedb and we'll alert you only when adobe ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.