CVE-2022-35699: Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this Adobe Bridge vulnerability?
The vulnerability ID for this Adobe Bridge vulnerability is CVE-2022-35699.
What is the severity of CVE-2022-35699?
The severity of CVE-2022-35699 is high with a severity rating of 7.8 out of 10.
Which versions of Adobe Bridge are affected by CVE-2022-35699?
Adobe Bridge versions 12.0.2 and earlier, as well as 11.1.3 and earlier, are affected by CVE-2022-35699.
How can CVE-2022-35699 be exploited?
CVE-2022-35699 can be exploited by opening a malicious file, which requires user interaction.
Where can I find more information about CVE-2022-35699?
You can find more information about CVE-2022-35699 on the Adobe website: https://helpx.adobe.com/security/products/bridge/apsb22-49.html