CVE-2026-21347CWE-190

CVE-2026-21347

High · published February 11, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
8.1
In the wild
Unconfirmed
What it is

⚡ An integer overflow could turn that innocuous file into an open invitation for trouble! Users of Bridge versions 15.1.3, 16.0.1, and earlier need to take this seriously. 🔥 Think of it like a friendly restaurant where the menu allows you to order food—but if the chef miscalculates ingredient amounts, you end up with an unpredictable dish. In this case, opening a malicious file is like accepting an order that was never meant for you, with potentially disastrous results! If an attacker exploits this vulnerability, they could execute arbitrary code in the context of the current user—imagine someone sneaking into your kitchen while you're busy enjoying dinner, and suddenly they have control over everything! User interaction is required, so be cautious with what files you open, as it could lead to a complete takeover of your system.

Put simply

Think of it like a friendly restaurant where the menu allows you to order food—but if the chef miscalculates ingredient amounts, you end up with an unpredictable dish. In this case, opening a malicious file is like accepting an order that was never meant for you, with potentially disastrous results! This integer overflow vulnerability in Bridge allows an attacker to manipulate the application into executing arbitrary code by affecting how the program handles integer values, essentially turning user actions into a weapon against their own system if a malicious file is opened.

What to do

If an attacker exploits this vulnerability, they could execute arbitrary code in the context of the current user—imagine someone sneaking into your kitchen while you're busy enjoying dinner, and suddenly they have control over everything! User interaction is required, so be cautious with what files you open, as it could lead to a complete takeover of your system. Upgrade to the latest version of Bridge to patch this vulnerability immediately. Educate users to avoid opening suspicious files, especially from unknown sources. Regular audits of file handling and application security practices are also recommended. You've got this! Patch up, stay aware, and keep that digital fortress secure! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00189 · 8.1th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2026-02-11T00:15Z
Affected products (2)
ProductVersionsFixed in
adobe/bridge< 15.1.415.1.4
adobe/bridge≥ 16.0, < 16.0.216.0.2
References (1)
EPSS history
Timeline
  • 10 FEB 18:24Z
    Bridge | Integer Overflow or Wraparound (CWE-190)
    cvelistv5