Adobe brackets vulnerabilities

Latest Adobe brackets CVEs

Newest publication first

1. CVE-2019-8255 Brackets versions 1.14 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

   Published 2019-12-19

   Critical·CVSS 9.8

   Brackets versions 1.14 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

2. CVE-2016-4165 The extension manager in Adobe Brackets before 1.7 allows attackers to have an unspecified impact via invalid input.

   Published 2016-06-16

   Critical·CVSS 9.8

   The extension manager in Adobe Brackets before 1.7 allows attackers to have an unspecified impact via invalid input.

3. CVE-2016-4164 Cross-site scripting (XSS) vulnerability in Adobe Brackets before 1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

   Published 2016-06-16

   Medium·CVSS 6.1

   Cross-site scripting (XSS) vulnerability in Adobe Brackets before 1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.