Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2016-0952

CWE-119 — Buffer Overflow5 documents4 sources
Severity
9.8CRITICAL
EPSS
17.5%
top 4.91%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Adobe Bridge CCAdobe Photoshop CC
Timeline
PublishedFeb 10
Latest updateMay 17

Description

Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0951 and CVE-2016-0953.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶NVDadobe/photoshop_cc16.1.1

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-m85w-w4cf-h327: Adobe Photoshop CC 2014 before 15↗2022-05-17
▶
CVEList
CVE-2016-0952: Adobe Photoshop CC 2014 before 15↗2016-02-10
▶

💥Exploits & PoCs

2
Exploit-DB
Microsoft Windows 10 - Diagnostics Hub Standard Collector Service Privilege Escalation↗2018-08-22
▶
Exploit-DB
Adobe Photoshop CC / Bridge CC - '.png' Parsing Memory Corruption (2)↗2016-02-09
▶