CVE-2026-27222
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Divide By Zero vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application or render it unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Risk Assessment
The risk is the potential for intentional crashing of the Bridge application, which can disrupt user workflows and impact productivity. The attack requires opening a malicious file, which limits the risk, but in a corporate environment it could be used in phishing campaigns.
Recommendation
It is recommended to immediately update Bridge to the latest available version that includes a fix for this vulnerability. Users should also be instructed not to open files from untrusted sources.
Original NVD description (English source)
Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Divide By Zero vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application or render it unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file.