CVE-2023-38217

Affected software : Adobe Bridge versions 12.0.4 and earlier, and 13.0.3 and earlier. Vulnerability : Out-of-bounds Read due to missing data boundary checks, leading to potential disclosure of sensitive memory and possible bypass of ASLR. Impact : memory disclosure; exploitation requires user int...

CVE-2024-34139

CVE-2024-34139 affects Adobe Bridge versions 14.0.4, 13.0.7, 14.1 and earlier, with an Integer Overflow/Wraparound when handling certain input (file parsing, per sources). This can enable arbitrary code execution under the current user’s context, requiring user interaction to open a malicious fil...

CVE-2021-21096

Adobe Bridge CVE-2021-21096 is an Improper Authorization vulnerability in the Genuine Software Service affecting versions 10.1.1 and earlier and 11.0.1 and earlier. A low-privileged attacker could cause an application denial-of-service without user interaction. The issue is referenced in APSB21-2...

CVE-2023-22230

Adobe Bridge is affected by an out-of-bounds write vulnerability (CVE-2023-22230) that could allow arbitrary code execution under the current user. Affected versions are 12.x prior to 12.0.4 and 13.x prior to 13.0.2, with exploitation requiring user interaction (victim must open a malicious file)...

CVE-2023-22231

CVE-2023-22231 affects Adobe Bridge 12.x before 12.0.4 and 13.x before 13.0.2. It is an out-of-bounds read that can disclose memory and potentially bypass mitigations such as ASLR. Exploitation requires user interaction (open a malicious file). Remediation: update to 12.0.4 or 13.0.2 as specified...

CVE-2020-9557

Adobe Bridge is affected by CVE-2020-9557: in versions 10.x before 10.0.4, an out-of-bounds read could lead to information disclosure. The connected Nessus/Adobe advisories (APSB20-19) reference multiple vulnerabilities and indicate 10.0.4 as the fixed version. Practical impact is information dis...

CVE-2021-21092

Adobe Bridge is affected by a memory corruption vulnerability in the DCM/file parsing path affecting versions 10.1.1 and earlier, and 11.0.1 and earlier. An unauthenticated attacker could achieve arbitrary code execution in the context of the current user, with exploitation requiring user interac...

CVE-2021-36073

CVE-2021-36073 is a heap-based buffer overflow in Adobe Bridge (11.1 and earlier) triggered while parsing a crafted .SGI file. The issue could allow code execution in the context of the current user and requires user interaction (victim must open a malicious file). Multiple connected sources corr...

CVE-2021-36079

Adobe Bridge 11.1 and earlier are affected by an out-of-bounds read when parsing a crafted .SGI file, potentially enabling remote code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Remediation per APSB21-69 is to apply the securit...

CVE-2024-20771

CVE-2024-20771 affects Adobe Bridge (Bridge 13.0.6, 14.0.2 and earlier). The issue is an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). A remediation/public fix is the APSB24-24 security update, which addresses ...

CVE-2020-9561

Adobe Bridge (Windows/macOS) is affected by CVE-2020-9561 via an out-of-bounds write in version 10.0.1 and earlier, which could allow arbitrary code execution on local systems. Multiple connected sources (NVD, Red Hat, Nessus APSB20-19 advisories) corroborate this vulnerability and indicate a rem...

CVE-2021-45052

Adobe Bridge (Windows/macOS) versions 11.1.2 and earlier, and 12.0 and earlier, are affected by an out-of-bounds read in TIF file handling that can disclose memory and may bypass ASLR. Exploitation requires user interaction (opening a malicious TIF). Affected products are addressed in Adobe’s APS...

CVE-2020-9559

Adobe Bridge is affected by CVE-2020-9559: versions 10.0.1 and earlier contain an out-of-bounds write vulnerability that could enable arbitrary code execution. Impact is high (local/low complexity with user interaction). Remediation: update to Adobe Bridge 10.0.4 or later per APSB20-19; other ven...

CVE-2020-9563

Adobe Bridge (10.x)

CVE-2020-9568

Adobe Bridge (Windows/macOS) versions 10.x prior to 10.0.4 are affected by a memory corruption vulnerability (CVE-2020-9568) that could allow arbitrary code execution if exploited. The issue is documented in APSB20-19 and multiple CVE sources; remediation is to upgrade to version 10.0.4 or later....

CVE-2021-36069

Adobe Bridge 11.x (11.1 and earlier) is affected by a memory corruption vulnerability in the handling of a malicious Bridge file, potentially allowing arbitrary code execution under the current user. Exploitation requires user interaction (opening a malicious file) and is confirmed across multipl...

CVE-2023-22227

Adobe Bridge (Windows/macOS) versions 12.0.3 and earlier, and 13.0.1 and earlier, are affected by an out-of-bounds write vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The iss...

CVE-2020-9562

Adobe Bridge version 10.x prior to 10.0.4 is affected by a heap overflow vulnerability (CVE-2020-9562) that could allow arbitrary code execution after successful exploitation. The connected sources (NVD entry and APSB20-19 advisory) corroborate that pre-10.0.4 builds are affected and that remedia...

CVE-2021-44743

Adobe Bridge (Windows/macOS) versions 11.1.2 and earlier and 12.0 and earlier are affected by CVE-2021-44743, an out-of-bounds write vulnerability in JPEG2000 parsing that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must ...

CVE-2021-45051

Adobe Bridge versions 11.1.2 and earlier, and 12.0 and earlier, are affected by a use-after-free in the processing of Format event actions that could disclose memory and bypass ASLR. Exploitation requires user interaction (opening a malicious file). Remediation: apply the APSB22-03 update (11.1.3...

CVE-2024-34140

CVE-2024-34140 affects Adobe Bridge as shipped in Bridge versions 14.0.4, 13.0.7, 14.1 and earlier. The issue is an out-of-bounds read that could disclose memory and potentially bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). The connected sources corroborate ...

CVE-2020-9558

Adobe Bridge (Adobe Bridge 10.x) is affected by CVE-2020-9558: versions prior to 10.0.4 contain an out-of-bounds read that could disclose information. Affected platforms include Windows and macOS. The vulnerability is addressed by updating to Adobe Bridge 10.0.4 as referenced in APSB20-19; other ...

CVE-2020-9564

Adobe Bridge 10.x (10.0.1 and earlier) is affected by an out-of-bounds write that could lead to arbitrary code execution if exploited locally. Multiple connected sources (Adobe APSB20-19 advisory, Red Hat CVE entry, and NVD listing) corroborate this CVE-2020-9564, with the noted vulnerability in ...

CVE-2020-9567

Adobe Bridge (Windows/macOS) 10.0.1 and earlier is affected by a use-after-free vulnerability (CVE-2020-9567) that could lead to arbitrary code execution. Root cause: use-after-free in the product. Impact: possible arbitrary code execution with high severity (CVSS details show local/invalid? refe...

CVE-2021-35991

Adobe Bridge 11.0.2 and earlier are affected by an Access of Uninitialized Pointer vulnerability when parsing a specially crafted file. An unauthenticated attacker could disclose arbitrary memory information in the context of the current user, with exploitation requiring user interaction (victim ...

CVE-2021-36049

Adobe Bridge 11.x (11.1 and earlier) is affected by a memory corruption vulnerability (CVE-2021-36049) and additional related issues when processing a crafted Bridge file, with exploitation requiring user interaction. The connected details describe multiple vulnerabilities across parsing of SGI f...

CVE-2021-39816

Adobe Bridge 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially allowing arbitrary code execution in the context of the current user. The exploit requires user interaction. Effects are documented for Windows with af...

CVE-2020-9565

Adobe Bridge 10.x before 10.0.4 is affected by an out-of-bounds write vulnerability (CVE-2020-9565) that could lead to arbitrary code execution. The issue affects versions 10.0.1 and earlier; the root cause is an out-of-bounds write in the application. The vulnerability is classified with local a...

CVE-2020-9554

Adobe Bridge is affected by CVE-2020-9554 and related advisories for version 10.x prior to 10.0.4. Affected component: Adobe Bridge, vulnerability type: out-of-bounds write in 10.0.1 and earlier that can lead to arbitrary code execution. Source details indicate local exploitation with high impact...

CVE-2020-9676

Adobe Bridge (Windows/macOS) is affected by CVE-2020-9676: an out-of-bounds write in version 10.0.3 and earlier that could allow arbitrary code execution. The issue is documented across multiple sources (NVD/Nessus advisories and Red Hat). Remediation in the linked advisories is to upgrade to at ...

CVE-2021-21091

Adobe Bridge is affected by CVE-2021-21091 (and related CVEs) due to an Out-of-bounds read while parsing crafted files in versions before 10.1.2 and 11.0.2. An unauthenticated user could disclose memory contents; exploitation requires opening a malicious file. The issue is addressed in APSB21-23;...

CVE-2025-27193

Adobe Bridge CVE-2025-27193 is a heap-based buffer overflow affecting Bridge 14.1.5, 15.0.2 and earlier, enabling arbitrary code execution when a user opens a crafted file. Root cause is improper memory handling during file processing; impact is at the user level with possible code execution. Exp...

CVE-2020-9566

CVE-2020-9566 affects Adobe Bridge 10.0.1 and earlier on Windows and macOS. The vulnerability is a use-after-free in a component of Bridge, enabling arbitrary code execution on successful exploitation. Public reporting in connected docs confirms impact and the existence of an official patch track...

CVE-2021-36076

Adobe Bridge is affected by a memory corruption vulnerability (CVE-2021-36076) in versions 11.1 and earlier due to insecure handling of a crafted Bridge file. Successful exploitation could lead to arbitrary code execution in the context of the current user, and exploitation requires user interact...

CVE-2023-22228

Adobe Bridge is affected by CVE-2023-22228: an Improper Input Validation vulnerability that could allow arbitrary code execution in the context of the current user. Affected versions are 12.0.3 (and earlier) and 13.0.1 (and earlier). Exploitation requires user interaction, specifically the victim...

CVE-2015-3111

CVE-2015-3111 is a heap-based buffer overflow affecting Adobe Photoshop CC prior to 16.0 (2015.0.0) and Adobe Bridge CC prior to 6.11. The connected Nessus entries map this CVE to Adobe Bridge 6.x and Photoshop CC vulnerabilities referenced in APSB15-13, which notes multiple issues and the need t...

CVE-2020-9553

Adobe Bridge (Windows/macOS) versions 10.0.1 and earlier are affected by CVE-2020-9553, an out-of-bounds read vulnerability in the handling of certain data structures. Successful exploitation could lead to information disclosure. The issue is part of a set of vulnerabilities described in APSB20-1...

CVE-2020-9560

Adobe Bridge CVE-2020-9560 affects 10.x up to 10.0.1 (earlier than 10.0.4). The vulnerability is an out-of-bounds write that could lead to arbitrary code execution. Patch available are included in APSB20-19; updating to 10.0.4 or later is the recommended remediation. CVSS data indicate HIGH impac...

CVE-2021-21094

CVE-2021-21094 affects Adobe Bridge versions prior to 10.1.2 and 11.0.2. It is an out-of-bounds write vulnerability triggered when parsing a specially crafted file, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicio...

CVE-2021-36067

Adobe Bridge 11.x is affected by a memory corruption/out-of-bounds vulnerability (CVE-2021-36067) in which insecure handling of a malicious Bridge file could lead to arbitrary code execution under the current user. The issue requires user interaction (open/handle a crafted Bridge file) and affect...

CVE-2021-36068

Adobe Bridge (version 11.1 and earlier) contains a memory corruption vulnerability due to insecure handling of a malicious Bridge file, which can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (e.g., opening a crafted file). The vulnera...

CVE-2021-36072

Adobe Bridge 11.x (11.1 and earlier) is affected by an out-of-bounds write vulnerability that can result in arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affects multiple CVEs, including CVE-2021-36072; rel...

CVE-2020-9555

Adobe Bridge 10.x up to and including 10.0.1 is affected by a stack-based buffer overflow (CVE-2020-9555). Exploitation could lead to arbitrary code execution. Affected component is the Bridge application (Adobe Bridge CC). The available connected sources consistently describe the issue but do no...

CVE-2020-9675

CVE-2020-9675 affects Adobe Bridge up to version 10.0.3, where an out-of-bounds read exists in Adobe Bridge. Successful exploitation could lead to arbitrary code execution. Public documents specify the vulnerable component as the Bridge application (versions ≤ 10.0.3) with the root cause being an...

CVE-2021-36078

CVE-2021-36078 – Adobe Bridge memory corruption vulnerability : Adobe Bridge 11.1 and earlier versions are affected by a memory corruption issue when processing a malicious Bridge file, potentially enabling arbitrary code execution in the context of the current user. Exploitation requires user in...

CVE-2023-22226

CVE-2023-22226 affects Adobe Bridge versions <= 12.0.3 and

CVE-2020-9569

Adobe Bridge CVE-2020-9569 is an out-of-bounds write vulnerability affecting Bridge 10.0.1 and earlier. Successful exploitation could lead to arbitrary code execution. The issue is tied to the APSB20-19 advisory, with mitigation via upgrading to Bridge 10.0.4 or later (platforms referenced includ...

CVE-2021-21093

Summary of CVE-2021-21093 (Adobe Bridge) : A memory corruption vulnerability in Adobe Bridge (versions 10.1.1 and earlier; 11.0.1 and earlier) occurs while parsing a specially crafted file. An unauthenticated attacker could exploit this to achieve arbitrary code execution in the current user cont...

CVE-2021-36075

Adobe Bridge 11.1 and earlier are affected by a buffer overflow vulnerability caused by insecure handling of a crafted Bridge file, potentially enabling arbitrary code execution under the current user. Exploitation requires user interaction. Public details in connected sources enumerate multiple ...

CVE-2021-35992

Adobe Bridge (Windows/macOS) vulnerable to an Out-of-bounds Read when parsing a specially crafted file, affecting version 11.0.2 and earlier. An unauthenticated attacker could disclose memory in the context of the current user, with exploitation requiring the user to open a malicious file. The is...