CVE-2021-28624

CVE-2021-28624 is a Heap-based Buffer Overflow vulnerability affecting Adobe Bridge version 11.0.2 and earlier. An unauthenticated attacker could exploit this vulnerability to achieve arbitrary code execution on the victim's system. Exploitation requires user interaction, specifically opening a malicious file. This vulnerability has a CVSS score of 7.8 (HIGH), indicating a high potential impact on confidentiality, integrity, and availability, with a local attack vector and low attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has received some community discussion and media coverage.