CVE-2020-9560: 
Adobe Bridge vulnerability analysis and mitigation

Adobe Bridge versions 10.0.1 and earlier versions were found to contain an out-of-bounds write vulnerability. The vulnerability was assigned CVE-2020-9560 and was disclosed on March 2, 2020. This security flaw affects Adobe Bridge software installations up to and including version 10.0.1 (NVD CVE, CVE MITRE).

The vulnerability is classified as an out-of-bounds write (CWE-787) issue. According to the National Vulnerability Database, it received a CVSS v3.1 base score of 7.8 (HIGH), with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. Under CVSS v2.0, it scored 9.3 (HIGH) with the vector (AV:N/AC:M/Au:N/C:C/I:C/A:C) (NVD CVE).

Successful exploitation of this vulnerability could lead to arbitrary code execution on affected systems. The high CVSS scores indicate severe potential impacts on the confidentiality, integrity, and availability of the affected systems (NVD CVE).

The vulnerability requires user interaction to be exploited, as indicated by the CVSS vector (UI:R). The local attack vector (AV:L) suggests that an attacker would need local access to the target system to exploit this vulnerability (NVD CVE).

Adobe has released a security patch to address this vulnerability. Users are advised to update their Adobe Bridge installations to a version newer than 10.0.1 (Adobe Advisory).