CVE-2022-28846: Adobe Bridge SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this Adobe Bridge vulnerability?
The vulnerability ID for this Adobe Bridge vulnerability is CVE-2022-28846.
What is the severity of CVE-2022-28846?
The severity of CVE-2022-28846 is high with a severity value of 7.8.
How does CVE-2022-28846 impact Adobe Bridge?
CVE-2022-28846 is an out-of-bounds write vulnerability in Adobe Bridge that could result in arbitrary code execution in the context of the current user.
How can CVE-2022-28846 be exploited?
Exploitation of CVE-2022-28846 requires user interaction, where a victim must open a malicious file.
Is Apple macOS or Microsoft Windows affected by CVE-2022-28846?
No, Apple macOS and Microsoft Windows are not affected by CVE-2022-28846.
Where can I find more information about CVE-2022-28846?
You can find more information about CVE-2022-28846 on the Adobe Security Bulletin APSB22-25.
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-28846?
The Common Weakness Enumeration (CWE) ID for CVE-2022-28846 is CWE-787.
How do I fix CVE-2022-28846?
To mitigate the vulnerability, it is recommended to update Adobe Bridge to version 12.0.2 or later as described in the Adobe Security Bulletin APSB22-25.