CVE-2026-27311

Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
References
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

15 Apr 2026, 19:59

Type Values Removed Values Added
First Time Adobe
Microsoft windows
Microsoft
Adobe bridge
Apple macos
Apple
References () https://helpx.adobe.com/security/products/bridge/apsb26-39.html - () https://helpx.adobe.com/security/products/bridge/apsb26-39.html - Vendor Advisory
CPE cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*

14 Apr 2026, 20:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-04-14 20:16

Updated : 2026-04-15 19:59


NVD link : CVE-2026-27311

Mitre link : CVE-2026-27311

CVE.ORG link : CVE-2026-27311


JSON object : View

Products Affected

adobe

  • bridge

microsoft

  • windows

apple

  • macos
CWE
CWE-122

Heap-based Buffer Overflow