CVE-2022-28276: 
Adobe Photoshop vulnerability analysis and mitigation

Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) were affected by an out-of-bounds write vulnerability, identified as CVE-2022-28276. The vulnerability was discovered and reported to Adobe on February 4, 2022, with a coordinated public release on April 28, 2022 (ZDI Advisory).

The vulnerability exists within the parsing of embedded fonts in Adobe Photoshop. The specific flaw allows crafted data in a font to trigger a write past the end of an allocated buffer. The vulnerability has been assigned a CVSS score of 7.8 (High) with the vector string AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (ZDI Advisory).

If successfully exploited, this vulnerability could allow remote attackers to execute arbitrary code in the context of the current process. The attack requires user interaction, specifically the target must visit a malicious page or open a malicious file (ZDI Advisory).

Adobe has issued an update to correct this vulnerability. Users are advised to update to the latest version of Adobe Photoshop (ZDI Advisory).