PT-2026-7427 · Adobe · Bridge

Jann Horn · Published 2026-02-10 · Updated 2026-02-11 · CVE-2026-21347

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bridge versions 15.1.3 and earlier Bridge versions 16.0.1 and earlier

Description Bridge versions 15.1.3 and 16.0.1, and earlier are susceptible to an Integer Overflow or Wraparound condition. Successful exploitation could lead to arbitrary code execution with the privileges of the current user. User interaction is required, specifically a victim must open a malicious file for exploitation to occur.

Recommendations Update Bridge to a version later than 15.1.3. Update Bridge to a version later than 16.0.1.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2026-01895

CVE-2026-21347

Affected Products

Bridge

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-21347 · Security Note
• https://helpx.adobe.com/security/products/bridge/apsb26-21.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01895 · Security Note
• https://osv.dev/vulnerability/CVE-2026-21347 · Vendor Advisory
• https://t.me/cveNotify/151725 · Telegram Post
• https://t.me/CVEtracker/44322 · Telegram Post