Description
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2026-09-22
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Arbitrary code execution
Action: Patch
AI Analysis

Impact

Bridge is vulnerable to an out‑of‑bounds write that can be triggered by opening a crafted file. This flaw allows an attacker to corrupt adjacent memory, leading to arbitrary code execution while running under the victim’s user account.

Affected Systems

Adobe Bridge software is affected. The vulnerability is present in all current releases of Adobe Bridge distributed by Adobe. No specific version information was provided, so all supported releases may be affected.

Risk and Exploitability

The CVSS score of 7.8 indicates a high potential impact if exploited. The EPSS score is not available, so the likelihood of exploitation is uncertain. The vulnerability is not listed in CISA KEV. Exploitation requires user interaction—specifically, the victim must open a malicious file—suggesting that phishing or social engineering is the likely attack vector.

Generated by OpenCVE AI on September 22, 2026 at 20:40 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the latest Adobe Bridge update that addresses the out‑of‑bounds write flaw.
  • If no patch is available, avoid opening unknown or suspicious files and enforce file‑type restrictions to limit exposure.
  • Maintain updated anti‑malware protection and monitor for signs of exploitation or abnormal activity.

Generated by OpenCVE AI on September 22, 2026 at 20:40 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 25 Sep 2026 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Adobe bridge
CPEs cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*
Vendors & Products Adobe bridge

Wed, 23 Sep 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 22 Sep 2026 22:30:00 +0000

Type Values Removed Values Added
First Time appeared Adobe
Adobe adobe Bridge
Vendors & Products Adobe
Adobe adobe Bridge

Tue, 22 Sep 2026 19:00:00 +0000

Type Values Removed Values Added
Description Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Title Bridge | Out-of-bounds Write (CWE-787)
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Subscriptions

Adobe Adobe Bridge Bridge
cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published:

Updated: 2026-09-23T12:54:35.113Z

Reserved: 2026-08-18T01:29:54.615Z

Link: CVE-2026-75658

cve-icon Vulnrichment

Updated: 2026-09-23T12:53:47.942Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-22T19:16:45.630

Modified: 2026-09-25T19:06:13.670

Link: CVE-2026-75658

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-22T22:15:06Z

Weaknesses