CVE-2023-22231

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 36/100
Published: 2023-02-17 Modified: 2026-10-28 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: Required
S: Unchanged
C: High
I: None
A: None

Description

Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
adobe bridge 12.0.0 – 12.0.4

References & Advisories (1)

Bug Bounty Relevance

36 / 100
✓ No authentication
✓ Low complexity

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

0.33%
Raw Score 0.003250
Percentile 25.6%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00325
2026-10-28
0.00325

Intelligence Sources

nvd ref →