CVE-2022-28279: Adobe Photoshop Font Parsing Use-After-Free Remote Code Execution Vulnerability
Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-28279?
CVE-2022-28279 is a use-after-free vulnerability in Adobe Photoshop versions 22.5.6 and earlier, as well as 23.2.2 and earlier, that could allow arbitrary code execution in the context of the current user.
How does CVE-2022-28279 affect Adobe Photoshop?
CVE-2022-28279 affects Adobe Photoshop versions 22.5.6 and earlier, as well as 23.2.2 and earlier, by allowing an attacker to execute arbitrary code if a victim opens a malicious file.
What is the severity of CVE-2022-28279?
CVE-2022-28279 has a severity rating of 7.8 (out of 10), indicating a critical vulnerability.
How can I fix CVE-2022-28279 in Adobe Photoshop?
To fix CVE-2022-28279, you should update Adobe Photoshop to version 22.5.7 or later for versions 22.5.6 and earlier, or to version 23.2.3 or later for versions 23.2.2 and earlier.
Where can I find more information about CVE-2022-28279?
You can find more information about CVE-2022-28279 on the Adobe Security Bulletin APSB22-20 at the following link: [Adobe Security Bulletin APSB22-20](https://helpx.adobe.com/security/products/photoshop/apsb22-20.html)