EUVD-2026-49951
GHSA-mm4m-6344-6w57
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Local file open requires no privileges but user interaction; full impact on all three security properties.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
Lifecycle Timeline
2DescriptionCVE.org
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Out-of-bounds write in Adobe Bridge allows arbitrary code execution when a user opens a malicious file. The vulnerability requires user interaction and runs code in the context of the current user. No active exploitation or public exploit code is known at the time of analysis.
Technical ContextAI
Adobe Bridge is a digital asset management application that parses various media file formats. CWE-787 (Out-of-bounds Write) indicates that a memory buffer boundary error likely occurs during file processing, allowing an attacker to corrupt memory and hijack execution flow. The affected product, as identified by CPE, is Adobe Bridge (cpe:2.3:a:adobe:adobe_bridge:*). The vulnerability is triggered by opening a specially crafted file, suggesting the flaw resides in a parsing routine that mishandles input size or structure.
RemediationAI
Upgrade to the latest version of Adobe Bridge as detailed in vendor advisory APSB26-89 (https://helpx.adobe.com/security/products/bridge/apsb26-89.html). No workarounds are provided; as a general precaution, avoid opening untrusted files in Adobe Bridge until the update is applied. Consider using file-level sandboxing or restricting execution permissions for the Bridge process as compensating controls, though these may impact functionality.
More in Adobe Bridge
View allArbitrary code execution in Adobe Bridge up to versions 15.1.6 and 16.0.5 occurs via an untrusted search path vulnerabil
Arbitrary code execution in Adobe Bridge via a malicious file opened by a victim. An incorrect authorization flaw allows
We need to parse the input data and produce a JSON object with the specified fields. The description: "Bridge is affecte
Privilege escalation in Adobe Bridge allows unauthorized read and write access via a malicious file opened by a victim.
Path traversal in Adobe Bridge allows local attackers to read arbitrary files from the victim's file system when a craft
Arbitrary code execution in Adobe Bridge is possible when a victim opens a maliciously crafted file that triggers a heap
Arbitrary code execution in Adobe Bridge allows an attacker to run code in the context of the current user by tricking a
Arbitrary code execution in Adobe Bridge arises from an integer overflow (CWE-190) triggered when a victim opens a malic
Arbitrary code execution in Adobe Bridge is possible when a victim opens a maliciously crafted file, triggering an out-o
Arbitrary code execution in Adobe Bridge allows local attackers to execute arbitrary code in the victim's context by ent
Opening a malicious file in Adobe Bridge triggers an out-of-bounds write, leading to arbitrary code execution with the c
Arbitrary code execution in Adobe Bridge is possible through an out-of-bounds write (CWE-787) triggered when a victim op
Same weakness CWE-787 – Out-of-bounds Write
View allShare
External POC / Exploit Code
Leaving vuln.today