CVE-2020-9553: 
Adobe Bridge vulnerability analysis and mitigation

Adobe Bridge versions 10.0.1 and earlier versions were found to contain an out-of-bounds read vulnerability. The vulnerability was assigned identifier CVE-2020-9553 and was disclosed on March 2, 2020. This security flaw specifically affected Adobe's digital asset management software Bridge, running on Windows and macOS systems (CVE Details).

The vulnerability is classified as an out-of-bounds read issue (CWE-125). It received a CVSS v3.1 base score of 3.3 (LOW) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N. Under CVSS v2.0, it was rated at 4.3 (MEDIUM) with the vector string (AV:N/AC:M/Au:N/C:P/I:N/A:N) (NVD).

If successfully exploited, this vulnerability could lead to information disclosure in the context of the current user. The impact is considered 'Important' in severity, though relatively limited in scope as it only affects information disclosure capabilities (Threatpost).

The vulnerability requires user interaction to be exploited, as indicated by the CVSS vector string. The exploitation would need to be triggered by opening a specially crafted file, though no known exploits in the wild have been reported (NVD).

Adobe addressed this vulnerability by releasing version 10.0.4 for both Windows and macOS platforms. The update was classified as a 'priority 3' patch, which according to Adobe indicates it resolves vulnerabilities in a product that has historically not been a target for attackers (Threatpost).