CVE-2019-8255

CVE-2019-8255 affects Adobe Brackets up to version 1.14. It is a command-injection vulnerability that could allow arbitrary code execution on successful exploitation. CVSSv3.1 base score 9.8 (CRITICAL). The supplied documents do not specify a patched version or remediation steps.

CVE-2016-4164

CVE-2016-4164 affects Adobe Brackets prior to 1.7 and is a cross-site scripting (XSS) vulnerability in which an attacker may inject arbitrary script or HTML via unspecified vectors. The NVD entry (and attestations in connected data) lists a CVSSv3.0 base score of 6.1 (MEDIUM) with network attack ...

CVE-2016-4165

Adobe Brackets is affected by CVE-2016-4165 in the extension manager prior to v1.7, where invalid input can lead to an unspecified impact. Connected sources also reference CVE-2016-4164 and note a security update (APS B16-20) that resolves both CVE-2016-4164 and CVE-2016-4165; users should apply ...