CVE-2023-44328

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Nov 16, 2023

Updated: Dec 4, 2023

CWE ID 416

Summary

CVE-2023-44328 is a Use After Free vulnerability affecting Adobe Bridge versions 13.0.4 and earlier, as well as 14.0.0 and earlier. This issue permits an attacker to manipulate memory in a way that could reveal sensitive information, bypassing Address Space Layout Randomization (ASLR) mitigations. The exploitation of this vulnerability necessitates user interaction, requiring the victim to open a malicious file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Adobe Bridge

Affected Vendors

Adobe

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/s0ts4I
https://www.cve.org/CVERecord?id=CVE-2023-44328
https://nvd.nist.gov/vuln/detail/CVE-2023-44328

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

US Violent Extremists Likely Shifting Focus to Targeted Physical Threats in 2025

DRAT V2: Updated DRAT Emerges in TAG-140’s Arsenal

Threats to the 2025 NATO Summit

Know What Matters

For Customers

For Partners