CVE-2021-42724: 
Adobe Bridge vulnerability analysis and mitigation

Adobe Bridge version 11.1.1 and earlier versions were found to contain a memory corruption vulnerability that was disclosed in October 2021. The vulnerability occurs due to insecure handling of malicious files, which could potentially lead to arbitrary code execution in the context of the current user. User interaction is required to trigger this vulnerability (Adobe Security, CVE Mitre).

The vulnerability (CVE-2021-42724) is classified as an 'Access of Memory Location After End of Buffer' issue that could lead to arbitrary code execution. It has been assigned a CVSS v3.1 score with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access, low attack complexity, no privileges required, user interaction required, and high impacts on confidentiality, integrity, and availability (Adobe Security).

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code in the context of the current user. The vulnerability affects the confidentiality, integrity, and availability of the system, with all three aspects rated as high impact according to the CVSS scoring (Adobe Security).

Adobe has released patches to address this vulnerability in their security bulletin. Administrators are recommended to apply the update within 30 days of release due to its Priority 2 rating (Threatpost).