Adobe Bridge is affected by a heap‑based buffer overflow that can lead to arbitrary code execution at the user level. The flaw allows a maliciously crafted file to overflow a heap buffer and redirect execution flow. In the worst case an attacker can run arbitrary code with the privileges of the user who opens the file, potentially compromising the system or gaining persistence.

Adobe Bridge is the affected product. The CVE data does not specify particular version ranges; therefore all current builds of Adobe Bridge are potentially vulnerable until a corrective update is applied.

The CVSS score of 7.8 classifies the vulnerability as high severity. Although EPSS is not available, the requirement for user interaction and opening of a malicious file limits the direct remote exploitability, making it a local or social‑engineering scenario. The vulnerability is not listed in CISA's KEV catalog, indicating no confirmed public exploits at the time of this analysis. Attackers would need to deliver a malicious Bridge file to a victim and convince them to open it.