Is CVE-2026-100126 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-100126 being exploited in the wild.

How severe is CVE-2026-100126?

Medium severity, with a CVSS score of 5.5, published 13 October 2026.

Which products and versions are affected?

Adobe Bridge 16.0.7 and earlier; Adobe Bridge (LTS) 15.1.8 and earlier.

Is there a fix for CVE-2026-100126?

Yes: fixed in Adobe Bridge 16.0.8; Adobe Bridge (LTS) 15.1.9. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-100126 attacked?

It is attacked with local access.

Am I affected by CVE-2026-100126?

Check whether you run Adobe Bridge or Adobe Bridge (LTS) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-100126: Adobe Bridge out-of-bounds read in memory exposure

CVE-2026-100126 · Severity: medium · CVSS 5.5 · Published 2026-10-13

Adobe Bridge is a media management and file browsing application used by creative professionals. An out-of-bounds read vulnerability allows an attacker to access and disclose sensitive data from the application's memory when a user opens a malicious file. While the flaw does not permit code execution on its own, it could expose credentials, encryption keys, or other confidential information.

Technologies: Adobe Bridge, Adobe Bridge (LTS). Vendors: Adobe.

Quick answers

Is CVE-2026-100126 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-100126 being exploited in the wild.
How severe is CVE-2026-100126?: Medium severity, with a CVSS score of 5.5, published 13 October 2026.
Which products and versions are affected?: Adobe Bridge 16.0.7 and earlier; Adobe Bridge (LTS) 15.1.8 and earlier.
Is there a fix for CVE-2026-100126?: Yes: fixed in Adobe Bridge 16.0.8; Adobe Bridge (LTS) 15.1.9. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-100126 attacked?: It is attacked with local access.
Am I affected by CVE-2026-100126?: Check whether you run Adobe Bridge or Adobe Bridge (LTS) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Adobe Bridge 16.0.8; Adobe Bridge (LTS) 15.1.9

Technical details

An out-of-bounds read (CWE-125) in Adobe Bridge permits memory disclosure when processing a crafted input. The vulnerability requires user interaction—a victim must open a malicious file—and results in confidentiality compromise without integrity or availability impact. A fix is available in Bridge 16.0.8 and LTS 15.1.9.

Affected products

Adobe Bridge 16.0.7 and earlier
Adobe Bridge (LTS) 15.1.8 and earlier

Timeline

2026-10-13: disclosed: Adobe Security Bulletin APSB26-167 published

References

https://www.adobe.com/trust/security/products/bridge/apsb26-167.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.