CVE-2021-36076: Adobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution
Published Sep 1, 2021
·Updated
Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Affected Software
2 affected components
Adobe Bridge<=11.1
Microsoft Windows
Remediation
Event History
Sep 1, 2021
CVE Published
via MITRE·02:35 PM
Data Sourced
via MITRE·02:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-36076?
CVE-2021-36076 is rated as a critical vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2021-36076?
To fix CVE-2021-36076, upgrade Adobe Bridge to version 11.2 or later.
3
What type of vulnerability is CVE-2021-36076?
CVE-2021-36076 is a memory corruption vulnerability.
4
Is user interaction required to exploit CVE-2021-36076?
Yes, user interaction is required to exploit CVE-2021-36076 by opening a malicious Bridge file.
5
Which versions of Adobe Bridge are affected by CVE-2021-36076?
Adobe Bridge versions 11.1 and earlier are affected by CVE-2021-36076.