EUVD-2026-49948
GHSA-6h3j-hghh-x5jq
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessCraft malicious file
-
DeliveryDeliver file to victim
-
ExploitVictim opens file in Adobe Bridge
-
ExecutionOut-of-bounds write triggers memory corruption
-
ImpactArbitrary code execution with user privileges
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, write limits
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation is limited to scenarios where a victim manually opens a malicious file in Adobe Bridge; no other special configuration, network service, or authentication is required. The attacker must rely on social engineering to deliver and convince the user to open the file. The local attack vector means the malicious file can be placed on the local system or delivered remotely, but user interaction is unavoidable. |
| Impact | CVSS 3.1 scores this vulnerability as 7.8 (High) with a local attack vector (AV:L) and required user interaction (UI:R), which constrains remote exploitability. EPSS data is unavailable to estimate exploitation likelihood, and the lack of CISA KEV listing or public exploit confirms a lower real-world urgency. SSVC assessment would weigh exploitation status as 'none' and automatable as 'no' due to user interaction, placing this in a moderate-risk category. The primary risk lies in targeted attacks against creative professionals who handle untrusted files; enterprise-wide risk is limited unless Adobe Bridge is widely deployed. |
| Exploit ScenarioDerived | An attacker delivers a maliciously crafted file (e.g., a specially prepared image or asset) via email or download. When the victim opens this file in Adobe Bridge, the out-of-bounds write is triggered, allowing the attacker to execute arbitrary code with the victim’s user privileges. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 28, 2026
Arbitrary code execution in Adobe Bridge allows local attackers to execute arbitrary code in the victim's context by enticing a user to open a malicious file. The out-of-bounds write vulnerability (CWE-787) requires no authentication and has not been reported as actively exploited or in the CISA Known Exploited Vulnerabilities catalog. No public exploit code is known at this time.
RemediationAI
Apply the patch provided in Adobe Security Bulletin APSB26-89. Immediately upgrade to the latest version of Adobe Bridge as specified in the advisory. Until patching, avoid opening untrusted files in Adobe Bridge or disable the application for file previews. No other effective workaround is available.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Adobe Bridge is a digital asset management application that parses various file formats, including images and videos. This vulnerability stems from an out-of-bounds write flaw (CWE-787) in its file parsing routines, where processing a specially crafted file triggers memory corruption. The affected product, identified by CPE 'cpe:2.3:a:adobe:adobe_bridge:*', allows an attacker to craft a file that overwrites memory beyond allocated buffers, leading to arbitrary code execution.
Know when Adobe Bridge gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Local attack with user interaction; no privileges required prior to exploitation; full impact on confidentiality, integrity, and availability.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
DescriptionCVE.org
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Memory corruption occurs when a program writes data beyond the boundaries of allocated memory regions or accesses memory in unintended ways, violating the integrity of the process's address space.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
More in Adobe Bridge
View allArbitrary code execution in Adobe Bridge up to versions 15.1.6 and 16.0.5 occurs via an untrusted search path vulnerabil
Arbitrary code execution in Adobe Bridge via a malicious file opened by a victim. An incorrect authorization flaw allows
Arbitrary code execution in Adobe Bridge 16.x (through 16.0.5) and 15.x (through 15.1.6) stems from an untrusted search
Privilege escalation in Adobe Bridge allows unauthorized read and write access via a malicious file opened by a victim.
Opening a crafted file in Adobe Bridge can trigger a heap-based buffer overflow that results in arbitrary code execution
Stack-based buffer overflow in Adobe Bridge lets a crafted file achieve arbitrary code execution with the privileges of
Heap-based buffer overflow in Adobe Bridge lets an attacker execute arbitrary code in the context of the current user wh
Arbitrary code execution in Adobe Bridge occurs when a victim opens a specially crafted file, allowing attacker-controll
Out-of-bounds write (CWE-787) in Adobe Bridge allows an attacker to achieve arbitrary code execution in the context of t
Out-of-bounds write in Adobe Bridge can be triggered when a user opens or previews a maliciously crafted file, allowing
Path traversal in Adobe Bridge allows local attackers to read arbitrary files from the victim's file system when a craft
Arbitrary code execution in Adobe Bridge is possible when a victim opens a maliciously crafted file that triggers a heap
Exploit-DB