CVE-2021-36059: Adobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution
Published Sep 1, 2021
·Updated
Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Affected Software
2 affected components
Adobe Bridge<=11.1
Microsoft Windows
Remediation
Event History
Sep 1, 2021
CVE Published
via MITRE·02:33 PM
Data Sourced
via MITRE·02:33 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-36059?
CVE-2021-36059 has been assigned a moderate severity level due to the potential for arbitrary code execution.
2
How do I fix CVE-2021-36059?
To fix CVE-2021-36059, update Adobe Bridge to the latest version beyond 11.1.
3
What causes the vulnerability in CVE-2021-36059?
CVE-2021-36059 is caused by memory corruption from insecure handling of malicious Bridge files.
4
Who is affected by CVE-2021-36059?
Users of Adobe Bridge version 11.1 and earlier are affected by CVE-2021-36059.
5
Is user interaction necessary to exploit CVE-2021-36059?
Yes, user interaction is required for the exploitation of CVE-2021-36059.