CVE-2021-36074

Adobe Bridge 11.x before 11.1.1 is affected by an out-of-bounds read that can disclose arbitrary memory and bypass mitigations like ASLR. Exploitation requires user interaction (opening a malicious file). The issue is documented as CVE-2021-36074 and is addressed by Adobe APSB21-69; remediation i...

CVE-2021-36075

Adobe Bridge 11.1 and earlier are affected by a buffer overflow vulnerability caused by insecure handling of a crafted Bridge file, potentially enabling arbitrary code execution under the current user. Exploitation requires user interaction. Public details in connected sources enumerate multiple ...

CVE-2021-36078

CVE-2021-36078 – Adobe Bridge memory corruption vulnerability : Adobe Bridge 11.1 and earlier versions are affected by a memory corruption issue when processing a malicious Bridge file, potentially enabling arbitrary code execution in the context of the current user. Exploitation requires user in...

CVE-2024-39386

Adobe Bridge CVE-2024-39386 affects Bridge versions 13.0.8, 14.1.1 and earlier. Root cause: out-of-bounds write leading to arbitrary code execution in the context of the current user; exploitation requires user interaction (victim opens a malicious file). Affected platforms include macOS and Wind...

CVE-2015-3112

CVE-2015-3112 is referenced in APSB15-13 as a memory corruption vulnerability affecting Adobe Photoshop CC before 16.0 and Bridge CC before 6.11. The Nessus/OpenVAS entries corroborate this issue as part of multiple vulnerabilities in Adobe Bridge/Photoshop; vectors are unspecified in the provide...

CVE-2021-21065

Adobe Bridge (Windows/macOS) versions 11.0 and earlier are affected by an out-of-bounds write vulnerability in TTF font parsing that can lead to arbitrary code execution in the current user context. Exploitation requires user interaction: a victim must open a malicious font/file. Affected product...

CVE-2021-21066

Adobe Bridge 11.0 and earlier is affected by an out-of-bounds write vulnerability when parsing TTF files, potentially allowing arbitrary code execution in the user’s context. Exploitation requires the user to open a crafted file. Remediation observed in advisories (APSB21-07) suggests updating to...

CVE-2021-35990

Adobe Bridge is affected by CVE-2021-35990: an Out-of-bounds Write vulnerability in parsing crafted files on versions 11.0.2 and earlier, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). The issue is documente...

CVE-2021-36059

Adobe Bridge CVE-2021-36059 and related 2021-36049/36072/36073/36079 family are memory corruption/out-of-bounds issues in Bridge 11.1 and earlier caused by insecure handling of a malicious Bridge file. Exploitation requires user interaction and results in arbitrary code execution in the current u...

CVE-2021-36071

Adobe Bridge 11.x versions prior to 11.1.1 are affected by an out-of-bounds read vulnerability (CVE-2021-36071) that can disclose arbitrary memory and bypass mitigations like ASLR. The issue is triggered by opening a malicious file and is tied to parsing of crafted content (per APSB21-69 and Open...

CVE-2021-36077

Adobe Bridge 11.x before 11.1.1 is vulnerable to a memory corruption issue caused by improper handling of crafted SVG files, potentially allowing local denial of service in the context of the current user. Exploitation requires user interaction. This is CVE-2021-36077 and is listed among vulnerab...

CVE-2024-47458

Adobe Bridge CVE-2024-47458 is a NULL Pointer Dereference affecting Bridge versions up to 14.1.2 and earlier, causing denial of service when a user opens a crafted file. The issue is triggered by user interaction and results in a crash; exploitation details beyond what the report states are not p...

CVE-2021-28624

Adobe Bridge (version 11.0.2 and earlier) contains a Heap-based Buffer Overflow vulnerability (CVE-2021-28624) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file); the issue is documented across multi...

CVE-2023-44327

Adobe Bridge (versions 13.0.4 and earlier; 14.0.0 and earlier) is affected by an Access of Uninitialized Pointer vulnerability that can disclose memory. The issue requires user interaction (open a malicious file) and can bypass ASLR mitigations. Affected component is the uninitialized pointer in ...

CVE-2021-35989

Adobe Bridge (Windows/macOS) versions 11.0.2 and earlier are affected by an out-of-bounds write when parsing a specially crafted file, leading to arbitrary code execution in the user's context. The issue requires user interaction (victim must open a malicious file). Remediations documented in APS...

CVE-2020-9551

CVE-2020-9551 affects Adobe Bridge 10.0 and earlier on Windows/macOS, where an out-of-bounds write could lead to arbitrary code execution. The connected advisories/plugins confirm the issue is addressed by APSB20-17, which patches to version 10.0.3. No exploitation details are provided in the sou...

CVE-2021-39817

Adobe Bridge (Windows) versions 11.1 and earlier are affected by multiple memory corruption vulnerabilities due to insecure handling of crafted Bridge files, potentially allowing arbitrary code execution in the current user context. Exploitation generally requires user interaction (opening a mali...

CVE-2024-45147

CVE-2024-45147 affects Adobe Bridge: out-of-bounds read (CWE-125) in Bridge versions 13.0.9, 14.1.2 and earlier, potentially exposing sensitive memory and enabling bypass of mitigations like ASLR. Exploitation requires the victim to open a malicious file, i.e., a user interaction attack with a lo...

CVE-2025-43547

CVE-2025-43547 is a vulnerability in Adobe Bridge where Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Overflow or Wraparound that could enable arbitrary code execution in the context of the current user. Exploitation requires the victim to open a malicious file (user inter...

CVE-2020-9552

CVE-2020-9552 affects Adobe Bridge 10.0 with a heap-based buffer overflow that could lead to arbitrary code execution. The connected Nessus entries indicate Adobe Bridge versions prior to 10.0.3 are affected, referencing APSB20-17. Public details within the provided documents do not specify the e...

CVE-2023-44328

Adobe Bridge is affected by a Use-After-Free vulnerability (CVE-2023-44328) in versions 13.0.4 and earlier and 14.0.0 and earlier, enabling disclosure of sensitive memory and potential bypass of ASLR. Exploitation requires user interaction (victim opens a malicious file). Various security advisor...

CVE-2023-44329

Adobe Bridge (13.x up to 13.0.4 and 14.x up to 14.0.0) is affected by an Access of Uninitialized Pointer vulnerability that can disclose memory. Root cause: uninitialized memory access during MP4/file parsing. Impact: potential memory disclosure; mitigations bypassed (ASLR). Exploitation requires...

CVE-2024-39387

Adobe Bridge (versions 13.0.8, 14.1.1 and earlier) is affected by an out-of-bounds read vulnerability (CVE-2024-39387) that can disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected platforms include macOS and Windo...

CVE-2025-43545

CVE-2025-43545 affects Adobe Bridge versions 15.0.3, 14.1.6 and earlier with an Access of Uninitialized Pointer vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected platforms in...

CVE-2025-43546

Adobe Bridge (Windows/macOS) is affected in versions 15.0.3, 14.1.6 and earlier by an Integer Underflow (Wrap or Wraparound) that can lead to arbitrary code execution in the current user context. Exploitation requires user interaction (open a malicious file). A patch is provided in APSB25-44; upg...

CVE-2026-27310

Adobe Bridge versions 16.0.2, 15.1.4 and earlier are affected by a heap-based buffer overflow that could allow arbitrary code execution in the current user context. Exploitation requires user interaction: a victim must open a malicious file. The CVSS v3.1 base score is 7.8 (High) with Local attac...

CVE-2026-21283

CVE-2026-21283 affects Adobe Bridge versions 15.1.2, 16.0 and earlier. The root cause is a heap-based buffer overflow in Bridge that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Impact: potent...

CVE-2026-21346

CVE-2026-21346 affects Adobe Bridge versions 15.1.3, 16.0.1 and earlier. The issue is an out-of-bounds write (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Redundant/confirming ...

CVE-2026-27312

Bridge software (Adobe Bridge) versions 16.0.2, 15.1.4 and earlier are affected by a heap-based buffer overflow that can lead to arbitrary code execution within the current user context. Exploitation requires user interaction, specifically opening a malicious file. The description does not specif...

CVE-2026-48311

CVE-2026-48311 affects Adobe Bridge. The vulnerability is an out-of-bounds write (CWE-787) in Bridge that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The provided documents do not specify a...

CVE-2026-27313

CVE-2026-27313 affects Adobe Bridge; a Heap-based Buffer Overflow could allow arbitrary code execution in the context of the current user. Affected versions: Bridge 16.0.2, 15.1.4 and earlier. Exploitation requires user interaction (victim must open a malicious file). The issue is linked to CVE-2...

CVE-2026-48374

Bridge is affected by an Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") vulnerability that could enable arbitrary file system read outside the intended scope. Exploitation requires user interaction : a victim must open a malicious file. The CVSS 3.1 metrics indicat...

CVE-2026-48392

This CVE affects Adobe Bridge (Bridge). It describes an out-of-bounds write (CWE-787) vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The connected documents provide the vuln...

CVE-2026-48393

CVE-2026-48393 concerns Adobe Bridge. The vulnerability is an out-of-bounds write (CWE-787) in Bridge that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The available documents do not specify...

CVE-2026-48395

CVE-2026-48395 : Bridge is affected by an Untrusted Search Path (CWE-426) vulnerability enabling arbitrary code execution in the current user context. Exploitation requires the victim to open a malicious file (user interaction) and is described with a LOCAL attack vector and HIGH impact on confid...

CVE-2026-27222

Technical details (affected products, exact vulnerable components, root cause, and remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-27311

CVE-2026-27311 affects Bridge versions 16.0.2, 15.1.4 and earlier. It is a heap-based buffer overflow that could lead to arbitrary code execution in the current user context. Exploitation requires user interaction (victim must open a malicious file). Attack vector is LOCAL with UI:R per CVSS 3.1,...

CVE-2026-48390

Technical details about CVE-2026-48390 are not publicly available in the provided documents. Monitor for updates from the sources referenced in the CVE entry.

CVE-2026-48394

CVE-2026-48394 affects Adobe Bridge. It is an out-of-bounds write (CWE-787) vulnerability in Bridge that could allow arbitrary code execution in the context of the current user when a victim opens a malicious file. The CVSS 3.1 vector indicates a local attack with user interaction required (UI:R)...

CVE-2026-48343

Bridge is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The CVSSv3.1 vector is LI/LO/PRN/UI:R/S:U/C:H/I:H/A:H with a base score...

CVE-2026-21347

CVE-2026-21347 affects Adobe Bridge. Affected versions: Bridge 15.1.3 and earlier, and 16.0.1 and earlier. The root cause is an Integer Overflow or Wraparound (CWE-190) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction —the victim...

CVE-2026-34630

CVE-2026-34630 affects Adobe Bridge up to 16.0.2 and 15.1.4 and earlier. It is a heap-based buffer overflow that can allow arbitrary code execution in the current user context. Exploitation requires user interaction: the victim must open a specially crafted file. Impact is rated High (C/H/I/A) wi...

CVE-2026-48339

CVE-2026-48339 describes a heap-based buffer overflow in Bridge that could lead to arbitrary code execution in the context of the current user. The vulnerability requires user interaction: a victim must open a malicious file. The available connected documents reiterate this condition and identify...

CVE-2026-48340

CVE-2026-48340 affects Adobe Bridge via an Untrusted Pointer Dereference in the Bridge component. The underlying issue enables arbitrary code execution in the context of the current user due to dereferencing an untrusted pointer. Exploitation requires user interaction: a victim must open a malici...

CVE-2026-48341

Bridge is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). The documents do not specify affected versions or a patch version. An Adobe ...

CVE-2026-48391

Technical details about CVE-2026-48391 are not publicly provided in the supplied documents; no affected products/versions/root cause/fixes are disclosed. Monitor for updates.

CVE-2026-48342

CVE-2026-48342 affects Bridge. It is an Integer Overflow or Wraparound vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The available documents provide the vulnerable componen...

CVE-2026-48396

CVE-2026-48396 refers to an Incorrect Authorization vulnerability in the Bridge product (Bridge/Adobe Bridge). The issue could allow arbitrary code execution in the context of the current user . Exploitation requires user interaction, as a victim must open a malicious file. The CVSS v3.1 metrics ...

CVE-2025-54268

CVE-2025-54268 affects Adobe Bridge versions 14.1.8, 15.1.1 and earlier and is described as a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (the user must open a malicious file). Multiple connected s...

CVE-2025-54278

Adobe Bridge (versions 14.1.8, 15.1.1 and earlier) is affected by a Heap-based Buffer Overflow (CVE-2025-54278) that could disclose memory contents. The vulnerability originates from a heap overflow and requires user interaction (victim must open a malicious file). Impact: memory disclosure. Expl...