CVE-2026-48396

HIGH

Adobe Bridge - Bridge | Incorrect Authorization (CWE-863)

Title source: rule
STIX 2.1

Description

Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

References (1)

Core 1
Core References

Scores

CVSS v3 8.6
EPSS 0.0016
EPSS Percentile 5.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-863
Status published
Products (4)
Adobe/Adobe Bridge < 15.1.6
Adobe/Adobe Bridge < 16.0.5
Adobe/Adobe Bridge 15.1.7
Adobe/Adobe Bridge 16.0.6
Published Jul 28, 2026
Tracked Since Jul 29, 2026