CVE-2021-36077: falha de média gravidade em Adobe Bridge
Adobe Bridge SVG File Memory Corruption Could Lead To Application Denial Of Service
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.5epss 2.3%
Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in local application denial of service in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Produtos afetados
Adobe · BridgeCVEs relacionadas — Adobe Bridge
No mesmo produto, das mais perigosas para as menos.
CVE-2021-42727HIGHAdobe Bridge Buffer Overflow Arbitrary code executionEPSS 39.4%CVE-2024-20752HIGHZDI-CAN-22653: Adobe Bridge PS File Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 7.8%CVE-2021-36075HIGHAdobe Bridge Buffer Overflow leads to Arbitrary Code ExecutionEPSS 7.5%CVE-2021-36073HIGHAdobe Bridge SGI File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 7.5%CVE-2021-28624HIGHAdobe Bridge SGI File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 7.2%CVE-2024-20755HIGHAdobe Bridge PDF Parsing Heap Memory Corruption Remote Code Execution VulnerabilityEPSS 4.4%