CVE-2026-48340

HIGH

Adobe Bridge - Bridge | Untrusted Pointer Dereference (CWE-822)

Title source: rule
STIX 2.1

Description

Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0017
EPSS Percentile 6.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-822
Status published
Products (5)
Adobe/Adobe Bridge < 15.1.5
Adobe/Adobe Bridge < 16.0.3
Adobe/Adobe Bridge 15.1.6
Adobe/Adobe Bridge 16.0.4
adobe/bridge < 15.1.5
Published Jul 14, 2026
Tracked Since Jul 15, 2026