CVE-2026-34630
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Heap-based Buffer Overflow vulnerability in Bridge versions 16.0.2, 15.1.4 and earlier. Could result in arbitrary code execution in the context of the current user. Requires user interaction to open a malicious file.
Risk Assessment
Risk of arbitrary code execution on the victim's machine after opening a malicious file, potentially leading to data theft or system compromise.
Recommendation
Update Adobe Bridge to a version later than 16.0.2 or 15.1.4. Avoid opening files from untrusted sources.
Other vulnerabilities in Adobe Bridge
See all- CVE-2026-48311High
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malicious file.
- CVE-2026-27310High
Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction to open a malicious file.
- CVE-2026-21283High
Bridge versions 15.1.2, 16.0 and earlier are affected by a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as opening a malicious file.
Original NVD description (English source)
Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.