Bridge Under Attack: Arbitrary Code Execution Vulnerability Affects Latest Versions

CVE-2024-20756

Summary

Adobe Bridge versions 13.0.5, 14.0.1, and earlier versions are susceptible to an out-of-bounds write vulnerability. This security flaw can potentially allow an attacker to execute arbitrary code within the context of the current user. The exploitation of this issue necessitates user interaction; specifically, a user must open a specially crafted malicious file to trigger the vulnerability. It is crucial for users of affected versions to apply the necessary updates to mitigate potential risks.

References