Description
Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Divide By Zero vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application or render it unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Scores
CVSS v3
5.5
EPSS
0.0002
EPSS Percentile
5.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-369
Status
published
Products (2)
Adobe/Bridge
< 15.1.4
adobe/bridge
< 15.1.5
Published
Apr 14, 2026
Tracked Since
Apr 15, 2026