Bridge Adobe Bridge

Do you want an email whenever new security vulnerabilities are reported in Adobe Bridge?

Recent Adobe Bridge Security Advisories

Advisory Title Published
APSB22-25 Security Updates Available for Adobe Bridge | APSB21-23 APSB22-25 June 14, 2022
APSB22-03 Security Updates Available for Adobe Bridge | APSB21-23 APSB22-03 January 11, 2022
APSB21-94 Security Updates Available for Adobe Bridge | APSB21-23 APSB21-94 October 26, 2021
APSB21-69 Security Updates Available for Adobe Bridge | APSB21-23 APSB21-69 August 17, 2021
APSB21-53 Security Updates Available for Adobe Bridge | APSB21-23 APSB21-53 July 13, 2021
APSB21-23 Security Updates Available for Adobe Bridge | APSB21-23 April 13, 2021
APSB21-07 Security Updates Available for Adobe Bridge | APSB21-07 January 12, 2021
APSB20-44 Security Updates Available for Adobe Bridge | APSB20-44 July 21, 2020
APSB20-19 Security Updates Available for Adobe Bridge APSB20-19 April 28, 2020
APSB20-17 Security Updates Available for Adobe Bridge APSB20-17 March 17, 2020

By the Year

In 2022 there have been 4 vulnerabilities in Adobe Bridge with an average score of 7.8 out of ten. Last year Bridge had 2 security vulnerabilities published. That is, 2 more vulnerabilities have already been reported in 2022 as compared to last year. Interestingly, the average vulnerability score and the number of vulnerabilities for 2022 and last year was the same.

Year Vulnerabilities Average Score
2022 4 7.80
2021 2 7.80
2020 0 0.00
2019 0 0.00
2018 0 0.00

It may take a day or so for new Bridge vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Adobe Bridge Security Vulnerabilities

Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file

CVE-2021-42722 7.8 - High - March 16, 2022

Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file

CVE-2021-42720 7.8 - High - March 16, 2022

Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted .jpe file

CVE-2021-42719 7.8 - High - March 16, 2022

Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted .jpe file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Bridge version 11.1.1 (and earlier) is affected by a double free vulnerability when parsing a crafted DCM file

CVE-2021-42533 7.8 - High - March 16, 2022

Adobe Bridge version 11.1.1 (and earlier) is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.

Double-free

Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file

CVE-2021-42725 7.8 - High - November 16, 2021

Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Access of Memory Location After End of Buffer

Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file

CVE-2021-36049 7.8 - High - September 01, 2021

Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Access of Memory Location After End of Buffer

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Adobe Bridge or by Adobe? Click the Watch button to subscribe.

Adobe
Vendor

Adobe Bridge
Product

subscribe