157 matches found
CVE-2021-21095
Adobe Bridge is affected by CVE-2021-21095: an Out-of-bounds write when parsing a crafted file in versions 10.1.1 and earlier, and 11.0.1 and earlier. An unauthenticated user could achieve arbitrary code execution in the context of the current user, with exploitation requiring the victim to open ...
CVE-2021-35990
Adobe Bridge is affected by CVE-2021-35990: an Out-of-bounds Write vulnerability in parsing crafted files on versions 11.0.2 and earlier, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). The issue is documente...
CVE-2021-36072
Adobe Bridge 11.x (11.1 and earlier) is affected by an out-of-bounds write vulnerability that can result in arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affects multiple CVEs, including CVE-2021-36072; rel...
CVE-2021-36074
Adobe Bridge 11.x before 11.1.1 is affected by an out-of-bounds read that can disclose arbitrary memory and bypass mitigations like ASLR. Exploitation requires user interaction (opening a malicious file). The issue is documented as CVE-2021-36074 and is addressed by Adobe APSB21-69; remediation i...
CVE-2021-36076
Adobe Bridge is affected by a memory corruption vulnerability (CVE-2021-36076) in versions 11.1 and earlier due to insecure handling of a crafted Bridge file. Successful exploitation could lead to arbitrary code execution in the context of the current user, and exploitation requires user interact...
CVE-2021-36078
CVE-2021-36078 – Adobe Bridge memory corruption vulnerability : Adobe Bridge 11.1 and earlier versions are affected by a memory corruption issue when processing a malicious Bridge file, potentially enabling arbitrary code execution in the context of the current user. Exploitation requires user in...
CVE-2023-44327
Adobe Bridge (versions 13.0.4 and earlier; 14.0.0 and earlier) is affected by an Access of Uninitialized Pointer vulnerability that can disclose memory. The issue requires user interaction (open a malicious file) and can bypass ASLR mitigations. Affected component is the uninitialized pointer in ...
CVE-2021-21065
Adobe Bridge (Windows/macOS) versions 11.0 and earlier are affected by an out-of-bounds write vulnerability in TTF font parsing that can lead to arbitrary code execution in the current user context. Exploitation requires user interaction: a victim must open a malicious font/file. Affected product...
CVE-2021-36068
Adobe Bridge (version 11.1 and earlier) contains a memory corruption vulnerability due to insecure handling of a malicious Bridge file, which can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (e.g., opening a crafted file). The vulnera...
CVE-2024-45147
CVE-2024-45147 affects Adobe Bridge: out-of-bounds read (CWE-125) in Bridge versions 13.0.9, 14.1.2 and earlier, potentially exposing sensitive memory and enabling bypass of mitigations like ASLR. Exploitation requires the victim to open a malicious file, i.e., a user interaction attack with a lo...
CVE-2021-28624
Adobe Bridge (version 11.0.2 and earlier) contains a Heap-based Buffer Overflow vulnerability (CVE-2021-28624) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file); the issue is documented across multi...
CVE-2021-36071
Adobe Bridge 11.x versions prior to 11.1.1 are affected by an out-of-bounds read vulnerability (CVE-2021-36071) that can disclose arbitrary memory and bypass mitigations like ASLR. The issue is triggered by opening a malicious file and is tied to parsing of crafted content (per APSB21-69 and Open...
CVE-2021-21066
Adobe Bridge 11.0 and earlier is affected by an out-of-bounds write vulnerability when parsing TTF files, potentially allowing arbitrary code execution in the user’s context. Exploitation requires the user to open a crafted file. Remediation observed in advisories (APSB21-07) suggests updating to...
CVE-2021-36059
Adobe Bridge CVE-2021-36059 and related 2021-36049/36072/36073/36079 family are memory corruption/out-of-bounds issues in Bridge 11.1 and earlier caused by insecure handling of a malicious Bridge file. Exploitation requires user interaction and results in arbitrary code execution in the current u...
CVE-2021-36075
Adobe Bridge 11.1 and earlier are affected by a buffer overflow vulnerability caused by insecure handling of a crafted Bridge file, potentially enabling arbitrary code execution under the current user. Exploitation requires user interaction. Public details in connected sources enumerate multiple ...
CVE-2023-44328
Adobe Bridge is affected by a Use-After-Free vulnerability (CVE-2023-44328) in versions 13.0.4 and earlier and 14.0.0 and earlier, enabling disclosure of sensitive memory and potential bypass of ASLR. Exploitation requires user interaction (victim opens a malicious file). Various security advisor...
CVE-2025-43547
CVE-2025-43547 is a vulnerability in Adobe Bridge where Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Overflow or Wraparound that could enable arbitrary code execution in the context of the current user. Exploitation requires the victim to open a malicious file (user inter...
CVE-2015-3112
CVE-2015-3112 is referenced in APSB15-13 as a memory corruption vulnerability affecting Adobe Photoshop CC before 16.0 and Bridge CC before 6.11. The Nessus/OpenVAS entries corroborate this issue as part of multiple vulnerabilities in Adobe Bridge/Photoshop; vectors are unspecified in the provide...
CVE-2021-35989
Adobe Bridge (Windows/macOS) versions 11.0.2 and earlier are affected by an out-of-bounds write when parsing a specially crafted file, leading to arbitrary code execution in the user's context. The issue requires user interaction (victim must open a malicious file). Remediations documented in APS...
CVE-2021-39817
Adobe Bridge (Windows) versions 11.1 and earlier are affected by multiple memory corruption vulnerabilities due to insecure handling of crafted Bridge files, potentially allowing arbitrary code execution in the current user context. Exploitation generally requires user interaction (opening a mali...
CVE-2020-9551
CVE-2020-9551 affects Adobe Bridge 10.0 and earlier on Windows/macOS, where an out-of-bounds write could lead to arbitrary code execution. The connected advisories/plugins confirm the issue is addressed by APSB20-17, which patches to version 10.0.3. No exploitation details are provided in the sou...
CVE-2024-39387
Adobe Bridge (versions 13.0.8, 14.1.1 and earlier) is affected by an out-of-bounds read vulnerability (CVE-2024-39387) that can disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected platforms include macOS and Windo...
CVE-2026-21346
CVE-2026-21346 affects Adobe Bridge versions 15.1.3, 16.0.1 and earlier. The issue is an out-of-bounds write (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Redundant/confirming ...
CVE-2020-9552
CVE-2020-9552 affects Adobe Bridge 10.0 with a heap-based buffer overflow that could lead to arbitrary code execution. The connected Nessus entries indicate Adobe Bridge versions prior to 10.0.3 are affected, referencing APSB20-17. Public details within the provided documents do not specify the e...
CVE-2023-44329
Adobe Bridge (13.x up to 13.0.4 and 14.x up to 14.0.0) is affected by an Access of Uninitialized Pointer vulnerability that can disclose memory. Root cause: uninitialized memory access during MP4/file parsing. Impact: potential memory disclosure; mitigations bypassed (ASLR). Exploitation requires...
CVE-2026-27310
Adobe Bridge versions 16.0.2, 15.1.4 and earlier are affected by a heap-based buffer overflow that could allow arbitrary code execution in the current user context. Exploitation requires user interaction: a victim must open a malicious file. The CVSS v3.1 base score is 7.8 (High) with Local attac...
CVE-2026-27313
CVE-2026-27313 affects Adobe Bridge; a Heap-based Buffer Overflow could allow arbitrary code execution in the context of the current user. Affected versions: Bridge 16.0.2, 15.1.4 and earlier. Exploitation requires user interaction (victim must open a malicious file). The issue is linked to CVE-2...
CVE-2025-43545
CVE-2025-43545 affects Adobe Bridge versions 15.0.3, 14.1.6 and earlier with an Access of Uninitialized Pointer vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected platforms in...
CVE-2026-21283
CVE-2026-21283 affects Adobe Bridge versions 15.1.2, 16.0 and earlier. The root cause is a heap-based buffer overflow in Bridge that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Impact: potent...
CVE-2025-43546
Adobe Bridge (Windows/macOS) is affected in versions 15.0.3, 14.1.6 and earlier by an Integer Underflow (Wrap or Wraparound) that can lead to arbitrary code execution in the current user context. Exploitation requires user interaction (open a malicious file). A patch is provided in APSB25-44; upg...
CVE-2026-27312
Bridge software (Adobe Bridge) versions 16.0.2, 15.1.4 and earlier are affected by a heap-based buffer overflow that can lead to arbitrary code execution within the current user context. Exploitation requires user interaction, specifically opening a malicious file. The description does not specif...
CVE-2026-48392
This CVE affects Adobe Bridge (Bridge). It describes an out-of-bounds write (CWE-787) vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The connected documents provide the vuln...
CVE-2026-48374
Bridge is affected by an Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") vulnerability that could enable arbitrary file system read outside the intended scope. Exploitation requires user interaction : a victim must open a malicious file. The CVSS 3.1 metrics indicat...
CVE-2026-48395
CVE-2026-48395 : Bridge is affected by an Untrusted Search Path (CWE-426) vulnerability enabling arbitrary code execution in the current user context. Exploitation requires the victim to open a malicious file (user interaction) and is described with a LOCAL attack vector and HIGH impact on confid...
CVE-2026-27222
Technical details (affected products, exact vulnerable components, root cause, and remediation) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2026-48393
CVE-2026-48393 concerns Adobe Bridge. The vulnerability is an out-of-bounds write (CWE-787) in Bridge that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The available documents do not specify...
CVE-2026-48394
CVE-2026-48394 affects Adobe Bridge. It is an out-of-bounds write (CWE-787) vulnerability in Bridge that could allow arbitrary code execution in the context of the current user when a victim opens a malicious file. The CVSS 3.1 vector indicates a local attack with user interaction required (UI:R)...
CVE-2026-27311
CVE-2026-27311 affects Bridge versions 16.0.2, 15.1.4 and earlier. It is a heap-based buffer overflow that could lead to arbitrary code execution in the current user context. Exploitation requires user interaction (victim must open a malicious file). Attack vector is LOCAL with UI:R per CVSS 3.1,...
CVE-2026-48390
Technical details about CVE-2026-48390 are not publicly available in the provided documents. Monitor for updates from the sources referenced in the CVE entry.
CVE-2026-48340
CVE-2026-48340 affects Adobe Bridge via an Untrusted Pointer Dereference in the Bridge component. The underlying issue enables arbitrary code execution in the context of the current user due to dereferencing an untrusted pointer. Exploitation requires user interaction: a victim must open a malici...
CVE-2026-48343
Bridge is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The CVSSv3.1 vector is LI/LO/PRN/UI:R/S:U/C:H/I:H/A:H with a base score...
CVE-2026-48339
CVE-2026-48339 describes a heap-based buffer overflow in Bridge that could lead to arbitrary code execution in the context of the current user. The vulnerability requires user interaction: a victim must open a malicious file. The available connected documents reiterate this condition and identify...
CVE-2026-48342
CVE-2026-48342 affects Bridge. It is an Integer Overflow or Wraparound vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The available documents provide the vulnerable componen...
CVE-2026-34630
CVE-2026-34630 affects Adobe Bridge up to 16.0.2 and 15.1.4 and earlier. It is a heap-based buffer overflow that can allow arbitrary code execution in the current user context. Exploitation requires user interaction: the victim must open a specially crafted file. Impact is rated High (C/H/I/A) wi...
CVE-2025-54268
CVE-2025-54268 affects Adobe Bridge versions 14.1.8, 15.1.1 and earlier and is described as a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (the user must open a malicious file). Multiple connected s...
CVE-2026-21347
CVE-2026-21347 affects Adobe Bridge. Affected versions: Bridge 15.1.3 and earlier, and 16.0.1 and earlier. The root cause is an Integer Overflow or Wraparound (CWE-190) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction —the victim...
CVE-2026-48396
CVE-2026-48396 refers to an Incorrect Authorization vulnerability in the Bridge product (Bridge/Adobe Bridge). The issue could allow arbitrary code execution in the context of the current user . Exploitation requires user interaction, as a victim must open a malicious file. The CVSS v3.1 metrics ...
CVE-2026-75649
Adobe Bridge is impacted by a Heap-based Buffer Overflow (CWE-122) vulnerability. This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Practical exploitation requires user interaction , specifically when a victim opens a malicious file . Re...
CVE-2026-48341
Bridge is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). The documents do not specify affected versions or a patch version. An Adobe ...