CVE-2020-9564 is an out-of-bounds write vulnerability affecting Adobe Bridge versions 10.0.1 and earlier, which could lead to arbitrary code execution. With a CVSS score of 7.8 (High), successful exploitation requires user interaction, typically through a malicious file, but can result in high impact to confidentiality, integrity, and availability. While no public exploit code (Metasploit, Nuclei, ExploitDB) is currently available and it's not listed in CISA's KEV catalog, the vulnerability has received some community discussion and media coverage, indicating awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 10.0.1CPE matchmatch criteria | cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.