Privilege Escalation in Adobe Bridge Affects User Access Control
CVE-2026-48390

8.2HIGH

Key Information:

Vendor

Adobe

Vendor
CVE Published:
28 July 2026

What is CVE-2026-48390?

Adobe Bridge is compromised by an Incorrect Authorization vulnerability that facilitates privilege escalation, enabling attackers to gain unauthorized read and write access to user files. Successful exploitation requires user interaction, as the victim must open a specially crafted malicious file. This flaw alters the access scope for users, raising significant concerns for data security within the application.

Affected Version(s)

Adobe Bridge 0 <= 16.0.5

Adobe Bridge 0 <= 15.1.6

Adobe Bridge 16.0.6

References

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.