8.2Yüksek
CVE-2026-48390Bridge | Incorrect Authorization (CWE-863)
Açıklama
Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Zayıflık türü (CWE):
CWE-863
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Adobe | Adobe Bridge | ≤ 16.0.5, fixed 16.0.6 | |
| adobe | bridge | < 15.1.7 |
Kaynaklar ve yamalar
- https://helpx.adobe.com/security/products/bridge/apsb26-89.html vendor-advisoryPatchVendor Advisory
CPE eşleşmeleri (NVD) (2)
cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*< 15.1.7cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*≥ 16.0 < 16.0.6