Skip to content
AdobeCVE-2026-48390

Adobe Bridge: improper authorization

High8.2CVE-2026-48390 · Published Jul 28, 2026 · updated Aug 3, 2026

Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Adobe advisory

Affected versions

PackageAffectedFixed in
Adobe Bridge
Product
<= 16.0.5No fix yet
<= 15.1.6No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-863

More Adobe advisories

All Adobe
Advisory
Adobe Bridge: untrusted search path
High8.2Jul 28
Adobe Bridge: out-of-bounds write
High7.8Jul 28
Adobe Bridge: out-of-bounds write
High7.8Jul 28
Adobe Bridge: out-of-bounds write
High7.8Jul 28
Adobe Bridge: untrusted search path
High8.6Jul 28
Adobe Bridge: improper authorization
High8.6Jul 28

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.