EUVD-2026-49951
GHSA-mm4m-6344-6w57
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessDeliver malicious file via email or download
-
ExploitVictim opens file in Adobe Bridge
-
ExecutionTrigger out-of-bounds write during parsing
-
ImpactExecute arbitrary code in user context
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, write limits
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Victim must explicitly open a malicious file in Adobe Bridge. No special configuration or feature enablement is required - the vulnerability exists in the default file-parsing functionality. User interaction is mandatory (UI:R). No authentication is needed (PR:N). |
| Impact | CVSS 3.1 vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H yields a base score of 7.8 (High). The local attack vector and required user interaction significantly reduce the risk of remote exploitation; an attacker must deliver a malicious file and convince the victim to open it. No EPSS score is provided, and CISA KEV status is absent, indicating no known active exploitation. No public exploit code is identified. Overall risk is moderate: high impact if exploited, but limited by the necessity of social engineering. No conflicting signals are present in the provided data. |
| Exploit ScenarioDerived | An attacker sends a specially crafted image or document file to a victim via email or download link. When the victim opens the file in Adobe Bridge, the out-of-bounds write corrupts memory, leading to arbitrary code execution with the privileges of the Bridge process. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 28, 2026
Out-of-bounds write in Adobe Bridge allows arbitrary code execution when a user opens a malicious file. The vulnerability requires user interaction and runs code in the context of the current user. No active exploitation or public exploit code is known at the time of analysis.
RemediationAI
Upgrade to the latest version of Adobe Bridge as detailed in vendor advisory APSB26-89 (https://helpx.adobe.com/security/products/bridge/apsb26-89.html). No workarounds are provided; as a general precaution, avoid opening untrusted files in Adobe Bridge until the update is applied. Consider using file-level sandboxing or restricting execution permissions for the Bridge process as compensating controls, though these may impact functionality.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Adobe Bridge is a digital asset management application that parses various media file formats. CWE-787 (Out-of-bounds Write) indicates that a memory buffer boundary error likely occurs during file processing, allowing an attacker to corrupt memory and hijack execution flow. The affected product, as identified by CPE, is Adobe Bridge (cpe:2.3:a:adobe:adobe_bridge:*). The vulnerability is triggered by opening a specially crafted file, suggesting the flaw resides in a parsing routine that mishandles input size or structure.
Know when Adobe Bridge gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Local file open requires no privileges but user interaction; full impact on all three security properties.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
DescriptionCVE.org
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Memory corruption occurs when a program writes data beyond the boundaries of allocated memory regions or accesses memory in unintended ways, violating the integrity of the process's address space.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
More in Adobe Bridge
View allArbitrary code execution in Adobe Bridge up to versions 15.1.6 and 16.0.5 occurs via an untrusted search path vulnerabil
Arbitrary code execution in Adobe Bridge via a malicious file opened by a victim. An incorrect authorization flaw allows
Arbitrary code execution in Adobe Bridge 16.x (through 16.0.5) and 15.x (through 15.1.6) stems from an untrusted search
Privilege escalation in Adobe Bridge allows unauthorized read and write access via a malicious file opened by a victim.
Opening a crafted file in Adobe Bridge can trigger a heap-based buffer overflow that results in arbitrary code execution
Stack-based buffer overflow in Adobe Bridge lets a crafted file achieve arbitrary code execution with the privileges of
Heap-based buffer overflow in Adobe Bridge lets an attacker execute arbitrary code in the context of the current user wh
Arbitrary code execution in Adobe Bridge occurs when a victim opens a specially crafted file, allowing attacker-controll
Out-of-bounds write (CWE-787) in Adobe Bridge allows an attacker to achieve arbitrary code execution in the context of t
Out-of-bounds write in Adobe Bridge can be triggered when a user opens or previews a maliciously crafted file, allowing
Path traversal in Adobe Bridge allows local attackers to read arbitrary files from the victim's file system when a craft
Arbitrary code execution in Adobe Bridge is possible when a victim opens a maliciously crafted file that triggers a heap
Exploit-DB