CVE-2026-48390

HIGH

Adobe Bridge - Bridge | Incorrect Authorization (CWE-863)

Title source: rule
STIX 2.1

Description

Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

References (1)

Core 1
Core References

Scores

CVSS v3 8.2
EPSS 0.0014
EPSS Percentile 4.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-863
Status published
Products (4)
Adobe/Adobe Bridge < 15.1.6
Adobe/Adobe Bridge < 16.0.5
Adobe/Adobe Bridge 15.1.7
Adobe/Adobe Bridge 16.0.6
Published Jul 28, 2026
Tracked Since Jul 29, 2026