CVE-2023-44335

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Nov 16, 2023
Updated: Nov 22, 2023
CWE ID 125

Summary

CVE-2023-44335 is a newly disclosed vulnerability affecting Adobe Photoshop versions 24.7.1 and earlier, as well as 25.0 and earlier. This issue is classified as an out-of-bounds read vulnerability, allowing an attacker to read sensitive memory content. With successful exploitation, an adversary could bypass Address Space Layout Randomization (ASLR), a common mitigation technique. The exploitation of this weakness necessitates user interaction, as the victim must open a specially crafted file to fall prey to the attack.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share