8.2Hoch

CVE-2026-48391Bridge | Untrusted Search Path (CWE-426)

Adobe Adobe Bridge Veröffentlicht: (vor 3 Monaten)

Beschreibung

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Schwachstellentyp (CWE): CWE-426

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Adobe Adobe Bridge ≤ 16.0.5, fixed 16.0.6
adobe bridge < 15.1.7

Referenzen und Patches

CPE-Treffer (NVD) (2)

  • cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:* < 15.1.7
  • cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:* ≥ 16.0 < 16.0.6