CVE-2022-28840: 
Adobe Bridge vulnerability analysis and mitigation

Adobe Bridge version 12.0.1 and earlier versions were affected by an out-of-bounds write vulnerability identified as CVE-2022-28840. The vulnerability was disclosed on June 14, 2022, and was classified as a critical security issue related to improper input validation (Adobe Security, NVD Database).

The vulnerability is classified as an Improper Input Validation (CWE-20) issue. It received a CVSS v3.0 score of 7.8, with the following vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. This indicates a locally exploitable vulnerability with low attack complexity, requiring no privileges but user interaction, potentially affecting confidentiality, integrity, and availability at high levels (Adobe Security).

The vulnerability could result in arbitrary code execution on affected systems, potentially allowing attackers to execute malicious code with the privileges of the user running Adobe Bridge (NVD Database).

While the vulnerability was rated as critical, there were no publicly reported exploits in the wild at the time of disclosure (ManageEngine).

Adobe addressed this vulnerability with the release of Adobe Bridge version 12.0.2. Users of affected versions were advised to update to the latest version to mitigate the risk (Adobe Security).