CVE-2026-48340
Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Scoring
- Severity
- HIGH
- CVSS base score
- 7.8
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS probability
- 0.29%
- CWE
- CWE-822
- Published
- 2026-07-14
- Last modified
- 2026-08-28
Affected products
- Adobe Adobe Bridge
- Adobe Adobe Bridge
- Adobe Adobe Bridge
Weakness type
Related vulnerabilities
- CVE-2026-83498 — Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
- CVE-2026-83939 — Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- CVE-2026-78451 — Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
- CVE-2026-78444 — Microsoft Failover Cluster Remote Code Execution Vulnerability
- CVE-2026-72938 — Microsoft Office PowerPoint Information Disclosure Vulnerability
- CVE-2026-72956 — Microsoft Office PowerPoint Information Disclosure Vulnerability
- CVE-2026-69874 — Windows ALPC Elevation of Privilege Vulnerability
- CVE-2026-69900 — Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability