EUVD-2026-44495
GHSA-jw5m-6mgx-5h74
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Local file-parsing bug requiring the victim to open a malicious file (AV:L, UI:R); no prior privileges needed (PR:N); memory corruption yields full code execution as the user, so C/I/A all High.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
Lifecycle Timeline
2DescriptionCVE.org
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Arbitrary code execution in Adobe Bridge is possible when a victim opens a maliciously crafted file, triggering an out-of-bounds write (CWE-787) that executes attacker-controlled code in the context of the current user. The flaw affects Adobe Bridge as reported by Adobe (advisory APSB26-81) and is rated CVSS 7.8; no public exploit identified at time of analysis and it is not listed in CISA KEV. Exploitation is local and hinges entirely on user interaction - the victim must open the malicious file.
Technical ContextAI
Adobe Bridge is a digital asset management application that catalogs and previews media files (images, video, PDFs, camera raw, and other formats) across Adobe Creative Cloud workflows. The root cause is CWE-787 (Out-of-Bounds Write): when Bridge parses a specially crafted file, it writes data past the bounds of an allocated buffer, corrupting adjacent memory. This class of memory-corruption bug is commonly reachable through the file/metadata/thumbnail parsers Bridge invokes automatically when rendering assets, and a controlled out-of-bounds write can be leveraged to overwrite pointers or control-flow structures, leading to arbitrary code execution. The CPE data identifies the affected product as cpe:2.3:a:adobe:adobe_bridge, but the specific fixed version is enumerated in the vendor advisory rather than the CPE string.
RemediationAI
Apply the patched Adobe Bridge release listed in Adobe security bulletin APSB26-81 (https://helpx.adobe.com/security/products/bridge/apsb26-81.html); the exact fixed version is published there and should be deployed via the Creative Cloud desktop app or enterprise Admin Console - patch available per vendor advisory, exact fix version to be confirmed from APSB26-81 as it is not included in the input data. Until patching completes, reduce exposure by treating Bridge as a client-side attack surface: do not open Bridge files (or let Bridge auto-generate previews for) assets received from untrusted email, downloads, or shared drives, and consider restricting Bridge from processing files in user download/temp directories. Because exploitation requires opening a malicious file, user-awareness controls and blocking untrusted file delivery channels are effective compensating controls, with the trade-off that they rely on user discipline and do not eliminate the underlying parser flaw.
More in Adobe Bridge
View allArbitrary code execution in Adobe Bridge up to versions 15.1.6 and 16.0.5 occurs via an untrusted search path vulnerabil
Arbitrary code execution in Adobe Bridge via a malicious file opened by a victim. An incorrect authorization flaw allows
We need to parse the input data and produce a JSON object with the specified fields. The description: "Bridge is affecte
Privilege escalation in Adobe Bridge allows unauthorized read and write access via a malicious file opened by a victim.
Path traversal in Adobe Bridge allows local attackers to read arbitrary files from the victim's file system when a craft
Arbitrary code execution in Adobe Bridge is possible when a victim opens a maliciously crafted file that triggers a heap
Arbitrary code execution in Adobe Bridge allows an attacker to run code in the context of the current user by tricking a
Arbitrary code execution in Adobe Bridge arises from an integer overflow (CWE-190) triggered when a victim opens a malic
Out-of-bounds write in Adobe Bridge allows arbitrary code execution when a user opens a malicious file. The vulnerabilit
Arbitrary code execution in Adobe Bridge allows local attackers to execute arbitrary code in the victim's context by ent
Opening a malicious file in Adobe Bridge triggers an out-of-bounds write, leading to arbitrary code execution with the c
Arbitrary code execution in Adobe Bridge is possible through an out-of-bounds write (CWE-787) triggered when a victim op
Same weakness CWE-787 – Out-of-bounds Write
View allShare
External POC / Exploit Code
Leaving vuln.today