CVE-2026-75655: Bridge | Uncontrolled Recursion (CWE-674)
Bridge is affected by an Uncontrolled Recursion vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Users of Adobe Bridge are exposed when they open a malicious file. The vulnerability can lead to arbitrary code execution in the context of the current user.
What does an attacker need to exploit it?
An attacker needs to convince a victim to open a malicious file. The listed vector is local, requires low attack complexity, requires no privileges, and requires user interaction.
What is the likely impact if exploitation succeeds?
Successful exploitation could allow arbitrary code execution with the permissions of the current user. Confidentiality, integrity, and availability impacts are each rated high.