cbcvebase.

Adobe Bridge vulnerabilities

154 known vulnerabilities affecting adobe/bridge.

Total CVEs
154
CISA KEV
0
Public exploits
3
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH116MEDIUM25LOW10

Vulnerabilities

Page 2 of 8
CVE-2021-21092P3HIGHCVSS 7.8≥ 10.0, ≤ 10.1.1≥ 11.0, ≤ 11.0.1+1 more2021-04-15
CVE-2021-21092 [HIGH] CWE-788 CVE-2021-21092: Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by a memory corrupt Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a
nvd
CVE-2021-21093P3HIGHCVSS 7.8≥ 10.0, ≤ 10.1.1≥ 11.0, ≤ 11.0.1+1 more2021-04-15
CVE-2021-21093 [HIGH] CWE-788 CVE-2021-21093: Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by a memory corrupt Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a
nvd
CVE-2021-21094P3HIGHCVSS 7.8≥ 10.0, ≤ 10.1.1≥ 11.0, ≤ 11.0.1+1 more2021-04-15
CVE-2021-21094 [HIGH] CWE-787 CVE-2021-21094: Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in tha
nvd
CVE-2021-42721P3HIGHCVSS 7.8≥ unspecified, ≤ 11.1.12021-11-16
CVE-2021-42721 [HIGH] CWE-416 CVE-2021-42721: Acrobat Bridge versions 11.1.1 and earlier are affected by a use-after-free vulnerability in the pro Acrobat Bridge versions 11.1.1 and earlier are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2021-21065P3HIGHCVSS 7.8fixed in 11.0.1≥ unspecified, ≤ 11.02021-02-25
CVE-2021-21065 [HIGH] CWE-787 CVE-2021-21065: Adobe Bridge version 11.0 (and earlier) is affected by an out-of-bounds write vulnerability when par Adobe Bridge version 11.0 (and earlier) is affected by an out-of-bounds write vulnerability when parsing TTF files that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2021-21066P3HIGHCVSS 7.8fixed in 11.0.1≥ unspecified, ≤ 11.02021-02-25
CVE-2021-21066 [HIGH] CWE-787 CVE-2021-21066: Adobe Bridge version 11.0 (and earlier) is affected by an out-of-bounds write vulnerability when par Adobe Bridge version 11.0 (and earlier) is affected by an out-of-bounds write vulnerability when parsing TTF files that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-28842P3HIGHCVSS 7.8≤ 12.0.1≥ unspecified, ≤ 12.0.12022-06-15
CVE-2022-28842 [HIGH] CWE-416 CVE-2022-28842: Adobe Bridge version 12.0.1 (and earlier versions) is affected by a Use-After-Free vulnerability tha Adobe Bridge version 12.0.1 (and earlier versions) is affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2021-44743P3HIGHCVSS 7.8fixed in 11.1.3v12.0+1 more2022-01-14
CVE-2021-44743 [HIGH] CWE-787 CVE-2021-44743: Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-b Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-28840P3HIGHCVSS 7.8≤ 12.0.1≥ unspecified, ≤ 12.0.12022-06-15
CVE-2022-28840 [HIGH] CWE-787 CVE-2022-28840: Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerabili Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-28841P3HIGHCVSS 7.8≤ 12.0.1≥ unspecified, ≤ 12.0.12022-06-15
CVE-2022-28841 [HIGH] CWE-787 CVE-2022-28841: Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerabili Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2021-36072P3HIGHCVSS 7.8≤ 11.1≥ unspecified, ≤ 11.12021-09-01
CVE-2021-36072 [HIGH] CWE-787 CVE-2021-36072: Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds write vulnerability that c Adobe Bridge versions 11.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-28843P3HIGHCVSS 7.8≤ 12.0.1≥ unspecified, ≤ 12.0.12022-06-15
CVE-2022-28843 [HIGH] CWE-787 CVE-2022-28843: Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerabili Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-28844P3HIGHCVSS 7.8≤ 12.0.1≥ unspecified, ≤ 12.0.12022-06-15
CVE-2022-28844 [HIGH] CWE-787 CVE-2022-28844: Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerabili Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-28839P3HIGHCVSS 7.8≤ 12.0.1≥ unspecified, ≤ 12.0.12022-06-15
CVE-2022-28839 [HIGH] CWE-787 CVE-2022-28839: Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerabili Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-28845P3HIGHCVSS 7.8≤ 12.0.1≥ unspecified, ≤ 12.0.12022-06-15
CVE-2022-28845 [HIGH] CWE-787 CVE-2022-28845: Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerabili Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-48395P3HIGHCVSS 8.6fixed in 15.1.7≥ 16.0, < 16.0.62026-07-28
CVE-2026-48395 [HIGH] CWE-426 CVE-2026-48395: Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code exe Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
nvd
CVE-2022-28848P3HIGHCVSS 7.8≤ 12.0.1≥ unspecified, ≤ 12.0.12022-06-15
CVE-2022-28848 [HIGH] CWE-787 CVE-2022-28848: Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerabili Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-28847P3HIGHCVSS 7.8≤ 12.0.1≥ unspecified, ≤ 12.0.12022-06-15
CVE-2022-28847 [HIGH] CWE-787 CVE-2022-28847: Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerabili Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-28846P3HIGHCVSS 7.8≤ 12.0.1≥ unspecified, ≤ 12.0.12022-06-15
CVE-2022-28846 [HIGH] CWE-787 CVE-2022-28846: Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerabili Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-48390P3HIGHCVSS 8.2fixed in 15.1.7≥ 16.0, < 16.0.62026-07-28
CVE-2026-48390 [HIGH] CWE-863 CVE-2026-48390: Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escala Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
nvd
Adobe Bridge vulnerabilities | cvebase