Adobe Bridge vulnerabilities

157 CVEs affecting Adobe Bridge, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-75676, published 2026-09-22.

More from Adobe.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-3111, published 2015-06-24. High severity, CVSS 10.0. EPSS: 19.5% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code via unspecified vectors.
• CVE-2015-3110, published 2015-06-24. High severity, CVSS 10.0. EPSS: 16.5% chance of exploitation in the next 30 days. Integer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code via unspecified vectors.
• CVE-2015-3112, published 2015-06-24. High severity, CVSS 10.0. EPSS: 14.3% chance of exploitation in the next 30 days. Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
• CVE-2024-20752, published 2024-03-18. High severity, CVSS 7.8. EPSS: 7.8% chance of exploitation in the next 30 days. Bridge versions 13.0.5, 14.0.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
• CVE-2021-36075, published 2021-09-01. High severity, CVSS 7.8. EPSS: 7.6% chance of exploitation in the next 30 days. Adobe Bridge version 11.1 (and earlier) is affected by a Buffer Overflow vulnerability due to insecure handling of a malicious Bridge file, potentially resulting in arbitrary code execution in the…
• CVE-2021-36073, published 2021-09-01. High severity, CVSS 7.8. EPSS: 7.6% chance of exploitation in the next 30 days. Adobe Bridge version 11.1 (and earlier) is affected by a heap-based buffer overflow vulnerability when parsing a crafted .SGI file. An attacker could leverage this vulnerability to execute code in…
• CVE-2021-28624, published 2021-08-20. High severity, CVSS 7.8. EPSS: 7.2% chance of exploitation in the next 30 days. Adobe Bridge version 11.0.2 (and earlier) are affected by a Heap-based Buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution…
• CVE-2020-9552, published 2020-03-25. High severity, CVSS 7.8. EPSS: 5.8% chance of exploitation in the next 30 days. Adobe Bridge versions 10.0 have a heap-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
• CVE-2020-9562, published 2020-06-26. High severity, CVSS 7.8. EPSS: 5.3% chance of exploitation in the next 30 days. Adobe Bridge versions 10.0.1 and earlier version have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
• CVE-2020-9563, published 2020-06-26. High severity, CVSS 7.8. EPSS: 5.2% chance of exploitation in the next 30 days. Adobe Bridge versions 10.0.1 and earlier version have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

Latest

• CVE-2026-75676, published 2026-09-22. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…
• CVE-2026-75665, published 2026-09-22. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction…
• CVE-2026-75663, published 2026-09-22. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in…
• CVE-2026-75658, published 2026-09-22. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in…
• CVE-2026-75656, published 2026-09-22. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information.…
• CVE-2026-75655, published 2026-09-22. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Bridge is affected by an Uncontrolled Recursion vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute…
• CVE-2026-75649, published 2026-09-22. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction…
• CVE-2026-48396, published 2026-07-28. High severity, CVSS 8.6. EPSS: 0.3% chance of exploitation in the next 30 days. Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to…
• CVE-2026-48395, published 2026-07-28. High severity, CVSS 8.6. EPSS: 0.3% chance of exploitation in the next 30 days. Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute…
• CVE-2026-48394, published 2026-07-28. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in…