← Back

CVE-2022-28850

nvd nist
Published: Jun 15, 2022Modified: Nov 21, 2024

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: psirt@adobe.com (Secondary)

Description

Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (1)

Products: Adobe: Bridge
1 product
Bridge
Configuration A
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Up to 12.0.1
Running on/withPlatform Versions
Apple
Macos
All versions
Microsoft
Windows
All versions

References (2)

Source: psirt@adobe.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.