CVE-2020-9566

CWE-416 — Use After Free3 documents3 sources
Severity
7.8HIGH
EPSS
8.9%
top 7.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Adobe BridgeAdobe Adobe Bridge
Timeline
PublishedJun 26
Latest updateMay 24

Description

Adobe Bridge versions 10.0.1 and earlier version have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDadobe/bridge10.0.1
▶CVEListV5adobe/adobe_bridge10.0.1 and earlier version versions

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-rc7m-7858-33xm: Adobe Bridge versions 10↗2022-05-24
▶
CVEList
CVE-2020-9566: Adobe Bridge versions 10↗2020-06-26
▶