CVE-2020-9563: 
Adobe Bridge vulnerability analysis and mitigation

Adobe Bridge (version 10.0.1 and earlier for Windows) was found to contain a critical heap overflow vulnerability (CVE-2020-9563) that could lead to arbitrary code execution in the context of the current user (Adobe Security, Threatpost).

The vulnerability is classified as a heap overflow bug that could enable arbitrary code execution if exploited by a remote attacker. Security researchers note that while critical, exploiting this vulnerability requires significant effort as attackers have no trivial way of controlling the heap (Threatpost).

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code on the affected system when a user opens a specially crafted file (Threatpost).

The vulnerability requires user interaction, specifically opening a specially crafted file, to be exploited. Security experts indicate that exploitation is complex due to limited heap control capabilities (Threatpost).

Adobe has released version 10.0.4 for Windows and macOS to address this vulnerability. The update is classified as priority 3, which Adobe defines as resolving vulnerabilities in a product that has historically not been a target for attackers (Threatpost).