CVE-2015-3110: adobe bridge Numeric Errors
CVSS: 10.0v2.0HighModified
Published 24-06-2015Last modified 06-08-2024
Vulnerability summary
CVE-2015-3110 is a high (CVSS 10.0) Numeric Errors vulnerability in adobe bridge. EPSS estimates a 16.52% chance of exploitation in the next 30 days, higher than 96.9% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
10.0/10
010
High · v2.0 (NVD)EPSS score
16.52%
0%100%
Medium · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1exploit-database
Timeline
- 24-06-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Integer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code via unspecified vectors.
CVSS metrics
1 score · 1 source · 1 versionHigh 10.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
16.52%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 16.52% on 18-09-2026
18-09-202618-10-2026
EPSS score16.52%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundPhotoshop CC2014 / Bridge CC 2014 - '.gif' Parsing Memory Corruption
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Adobe2 products
- bridge≤ 6.1
- photoshop_cc≤ 15.2.2
1 vendor · 2 products