CVE-2026-21283
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Bridge versions 15.1.2, 16.0 and earlier are affected by a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
Risk Assessment
An attacker could execute malicious code on the victim's machine, potentially leading to system compromise. The risk is significant as only opening a malicious file is required.
Recommendation
Update Bridge to the latest version. Also, be cautious when opening files from untrusted sources.
Other vulnerabilities in Adobe Bridge
See all- CVE-2026-48311High
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malicious file.
- CVE-2026-34630High
Heap-based Buffer Overflow vulnerability in Bridge versions 16.0.2, 15.1.4 and earlier. Could result in arbitrary code execution in the context of the current user. Requires user interaction to open a malicious file.
- CVE-2026-27310High
Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction to open a malicious file.
Original NVD description (English source)
Bridge versions 15.1.2, 16.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.