CVE-2022-28839: 
Adobe Bridge vulnerability analysis and mitigation

Adobe Bridge version 12.0.1 and earlier versions were affected by an out-of-bounds write vulnerability identified as CVE-2022-28839. The vulnerability was disclosed on June 14, 2022, affecting both Windows and macOS operating systems. This security flaw requires user interaction, specifically opening a malicious file, to be exploited (Adobe Advisory, NVD).

The vulnerability is classified as an out-of-bounds write (CWE-787) with a CVSS v3.0 base score of 7.8 (High). The CVSS vector string is CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. Under CVSS v2.0, it received a higher base score of 9.3 with the vector (AV:N/AC:M/Au:N/C:C/I:C/A:C) (Adobe Advisory, NVD).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. The impact is considered critical with potential for complete compromise of system confidentiality, integrity, and availability (Adobe Advisory).

Adobe addressed this vulnerability with the release of Adobe Bridge version 12.0.2. Users are advised to update to this version to mitigate the security risk (Adobe Advisory).