Heap-based Buffer Overflow in Bridge by Adobe
CVE-2026-34630

7.8HIGH

Key Information:

Vendor

Adobe
Status
Bridge
Vendor
CVE Published:
14 April 2026

What is CVE-2026-34630?

A vulnerability exists in Adobe Bridge versions 16.0.2, 15.1.4, and earlier, characterized by a Heap-based Buffer Overflow. This weakness could enable an attacker to execute arbitrary code in the context of the current user, necessitating user action. The exploitation of this vulnerability requires a victim to open a specially crafted malicious file, which can lead to potential system compromise. It is essential for users of affected versions to stay informed about this security issue and apply any necessary updates or patches to mitigate risk.

Affected Version(s)

Bridge 0 <= 15.1.4

References

https://helpx.adobe.com/security/products/bridge/apsb26-3...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.