CVE-2021-21051: 
Adobe Photoshop vulnerability analysis and mitigation

Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted javascript file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. The vulnerability requires user interaction as the victim must open a malicious file (NVD).

The vulnerability is classified as a Buffer Overflow (CWE-120) with a CVSS 3.0 Base Score of 7.8 (HIGH). The CVSS vector is CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability (NVD).

A successful exploitation of this vulnerability could allow an attacker to execute arbitrary code in the context of the current user, potentially leading to complete system compromise with the same privileges as the affected user (NVD).

The vulnerability requires user interaction to be exploited, as the victim must open a malicious javascript file. The attack complexity is considered low, meaning once the user interaction requirement is met, exploiting the vulnerability is relatively straightforward (NVD).

Adobe has released security updates to address this vulnerability. Users should update to versions later than Photoshop 21.2.4 or 22.1.1 depending on their installation branch (Adobe Advisory).