CVE-2026-71381
Received Received - Intake

Incorrect Authorization in Adobe Genuine Software Integrity Service

Vulnerability report for CVE-2026-71381, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-07

Last updated on: 2026-08-07

Assigner: Adobe Systems Incorporated

Description

Adobe Genuine Software Integrity Service was affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could have leveraged this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue did not require user interaction, but required the attacker to have access to the local environment the application is installed on.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-07
Last Modified
2026-08-07
Generated
2026-08-08
AI Q&A
2026-08-08
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
adobe genuine_software_integrity_service *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an Incorrect Authorization vulnerability in Adobe Genuine Software Integrity Service that allows bypassing security features. It could let an attacker gain limited write access without user interaction, but requires local access to the affected system.

Detection Guidance

Detection requires checking for unauthorized modifications to the Adobe Genuine Software Integrity Service. Inspect the service's permissions and configurations for unexpected changes. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could allow an attacker with local access to modify certain files or settings on your system, potentially disrupting Adobe software functionality or enabling further attacks.

Compliance Impact

This vulnerability could potentially impact compliance with standards like GDPR and HIPAA by allowing unauthorized access to system resources. The bypass of security features may lead to unauthorized data access or modification, which could violate data protection requirements under these regulations.

Mitigation Strategies

Update the Adobe Genuine Software Integrity Service to the latest version. Restrict local access to the system where the service is installed. Monitor for unauthorized write access attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-71381. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart