CVE-2023-22244: 
Adobe Premiere Rush vulnerability analysis and mitigation

Adobe Premiere Rush version 2.6 and earlier versions were found to contain a Use After Free (UAF) vulnerability, identified as CVE-2023-22244. The vulnerability was disclosed on February 14, 2023, and affects Adobe Premiere Rush software running on Microsoft Windows systems. This security flaw requires user interaction, specifically opening a malicious file, to be exploited (Adobe Advisory, NVD).

The vulnerability is classified as a Use After Free (CWE-416) issue that could potentially lead to arbitrary code execution in the context of the current user. The severity of this vulnerability has been rated as HIGH with a CVSS v3.1 base score of 7.8. The CVSS vector string is CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access, low attack complexity, no privileges required, and user interaction required (NVD).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. This means an attacker could potentially execute malicious code with the same privileges as the user running the Adobe Premiere Rush application (NVD).

The vulnerability requires user interaction for successful exploitation, specifically requiring a victim to open a malicious file. The local attack vector suggests that an attacker would need local access to the target system or would need to convince a user to download and open a specially crafted malicious file (NVD).

Users should update to the latest version of Adobe Premiere Rush beyond version 2.6 to address this vulnerability. The fix was released as part of Adobe's security update (Adobe Advisory).