CVE-2022-28645

Bentley MicroStation CONNECT 10.16.02.34 is affected by a DGN file parsing out-of-bounds read that can disclose sensitive information. The flaw allows an attacker to trigger a read past the end of an allocated buffer and, in conjunction with other vulnerabilities, may lead to arbitrary code execu...

CVE-2022-28645

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...