EUVD-2026-44498
GHSA-x444-68r9-2w85
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
File must be opened locally by a user so AV:L and UI:R; no privileges needed (PR:N) and code runs as current user with full C/I/A impact.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
Lifecycle Timeline
2DescriptionCVE.org
Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Arbitrary code execution in Adobe Bridge is possible when a victim opens a maliciously crafted file that triggers a heap-based buffer overflow (CWE-122), letting an attacker run code in the context of the current user. The flaw was reported by Adobe and disclosed in advisory APSB26-81; there is no public exploit identified at time of analysis and it is not listed in CISA KEV. Exploitation is file-borne and requires user interaction, so it is not remotely triggerable without a user opening attacker-supplied content.
Technical ContextAI
Adobe Bridge is a digital-asset management application used to browse, organize, preview, and process creative media files across the Adobe Creative Cloud ecosystem. The root cause is a heap-based buffer overflow (CWE-122): while parsing the contents of a specially crafted file, Bridge writes past the bounds of a heap-allocated buffer, corrupting adjacent heap metadata or object data. Such corruption can be leveraged to hijack control flow (e.g., overwriting function pointers or heap chunk headers) and achieve arbitrary code execution. The affected CPE is cpe:2.3:a:adobe:adobe_bridge, and because file parsers in media applications handle many complex, attacker-influenced formats, this class of memory-safety defect is a recurring pattern in Adobe desktop products.
RemediationAI
Apply the update referenced in Adobe security advisory APSB26-81 (https://helpx.adobe.com/security/products/bridge/apsb26-81.html) - Patch available per vendor advisory; the exact fixed version was not provided in the input and should be taken directly from that bulletin. Until the update is installed, reduce exposure by not opening Adobe Bridge files from untrusted or unsolicited sources, handling only files from known-good origins, and treating media files delivered via email or downloads as suspect; because the exploit requires the victim to open a malicious file, user-awareness controls and blocking risky attachments at the mail/web gateway are effective compensating measures. These controls have minimal functional side effects beyond added friction in opening external files and do not fully substitute for the patch.
More in Adobe Bridge
View allArbitrary code execution in Adobe Bridge up to versions 15.1.6 and 16.0.5 occurs via an untrusted search path vulnerabil
Arbitrary code execution in Adobe Bridge via a malicious file opened by a victim. An incorrect authorization flaw allows
We need to parse the input data and produce a JSON object with the specified fields. The description: "Bridge is affecte
Privilege escalation in Adobe Bridge allows unauthorized read and write access via a malicious file opened by a victim.
Path traversal in Adobe Bridge allows local attackers to read arbitrary files from the victim's file system when a craft
Arbitrary code execution in Adobe Bridge allows an attacker to run code in the context of the current user by tricking a
Arbitrary code execution in Adobe Bridge arises from an integer overflow (CWE-190) triggered when a victim opens a malic
Arbitrary code execution in Adobe Bridge is possible when a victim opens a maliciously crafted file, triggering an out-o
Out-of-bounds write in Adobe Bridge allows arbitrary code execution when a user opens a malicious file. The vulnerabilit
Arbitrary code execution in Adobe Bridge allows local attackers to execute arbitrary code in the victim's context by ent
Opening a malicious file in Adobe Bridge triggers an out-of-bounds write, leading to arbitrary code execution with the c
Arbitrary code execution in Adobe Bridge is possible through an out-of-bounds write (CWE-787) triggered when a victim op
Same weakness CWE-122 – Heap-based Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today