8.2Alta

CVE-2026-48391Bridge | Untrusted Search Path (CWE-426)

Adobe Adobe Bridge Publicada: (hace 3 meses)

Descripción

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Debilidad (CWE): CWE-426

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Adobe Adobe Bridge ≤ 16.0.5, fixed 16.0.6
adobe bridge < 15.1.7

Referencias y parches

Coincidencias CPE (NVD) (2)

  • cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:* < 15.1.7
  • cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:* ≥ 16.0 < 16.0.6