# Adobe Bridge vulnerabilities Source: https://junglewise.ai/threats/technologies/bridge Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/bridge.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 34 vulnerabilities in Adobe Bridge: 0 in the last 7 days and 11 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-100129, was published on 13 October 2026. 4 vulnerabilities in the last four weeks, down 43% on the four before (7). ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 11 - All time: 34 (0 critical, 0 exploited in the wild) ## About Adobe Bridge Adobe software library component for application development and integration. ## Latest Adobe Bridge vulnerabilities - [CVE-2026-100129: Adobe Bridge out-of-bounds write arbitrary code execution](https://junglewise.ai/threats/cve-2026-100129-bridge-is-affected-by-an-out-of-bounds-write-vulnerability-that) (high, CVSS 7.8, published 13 Oct 2026) - [CVE-2026-100128: Adobe Bridge out-of-bounds write arbitrary code execution](https://junglewise.ai/threats/cve-2026-100128-bridge-is-affected-by-an-out-of-bounds-write-vulnerability-that) (high, CVSS 7.8, published 13 Oct 2026) - [CVE-2026-100127: Adobe Bridge out-of-bounds write vulnerability](https://junglewise.ai/threats/cve-2026-100127-bridge-is-affected-by-an-out-of-bounds-write-vulnerability-that) (high, CVSS 7.8, published 13 Oct 2026) - [CVE-2026-100126: Adobe Bridge out-of-bounds read in memory exposure](https://junglewise.ai/threats/cve-2026-100126-bridge-is-affected-by-an-out-of-bounds-read-vulnerability-that) (medium, CVSS 5.5, published 13 Oct 2026) - [CVE-2026-75676: Adobe Bridge stack-based buffer overflow](https://junglewise.ai/threats/cve-2026-75676-bridge-is-affected-by-a-stack-based-buffer-overflow-vulnerability) (high, CVSS 7.8, published 22 Sep 2026) - [CVE-2026-75665: Adobe Bridge heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-75665-bridge-is-affected-by-a-heap-based-buffer-overflow-vulnerability) (high, CVSS 7.8, published 22 Sep 2026) - [CVE-2026-75663: Adobe Bridge out-of-bounds write in file handling](https://junglewise.ai/threats/cve-2026-75663-bridge-is-affected-by-an-out-of-bounds-write-vulnerability-that) (high, CVSS 7.8, published 22 Sep 2026) - [CVE-2026-75658: Adobe Bridge out-of-bounds write](https://junglewise.ai/threats/cve-2026-75658-bridge-is-affected-by-an-out-of-bounds-write-vulnerability-that) (high, CVSS 7.8, published 22 Sep 2026) - [CVE-2026-75656: Adobe Bridge out-of-bounds read in file handling](https://junglewise.ai/threats/cve-2026-75656-bridge-is-affected-by-an-out-of-bounds-read-vulnerability-that) (medium, CVSS 5.5, published 22 Sep 2026) - [CVE-2026-75655: Adobe Bridge uncontrolled recursion arbitrary code execution](https://junglewise.ai/threats/cve-2026-75655-bridge-is-affected-by-an-uncontrolled-recursion-vulnerability) (high, CVSS 7.8, published 22 Sep 2026) - [CVE-2026-75649: Adobe Bridge heap buffer overflow](https://junglewise.ai/threats/cve-2026-75649-bridge-is-affected-by-a-heap-based-buffer-overflow-vulnerability) (high, CVSS 7.8, published 22 Sep 2026) - [CVE-2026-48396: Adobe Bridge incorrect authorization code execution](https://junglewise.ai/threats/cve-2026-48396-adobe-bridge-incorrect-authorization-code-execution) (high, CVSS 8.6, published 28 Jul 2026) - [CVE-2026-48395: Adobe Bridge untrusted search path arbitrary code execution](https://junglewise.ai/threats/cve-2026-48395-adobe-bridge-untrusted-search-path-arbitrary-code-execution) (high, CVSS 8.6, published 28 Jul 2026) - [CVE-2026-48394: Adobe Bridge out-of-bounds write code execution](https://junglewise.ai/threats/cve-2026-48394-adobe-bridge-out-of-bounds-write-code-execution) (high, CVSS 7.8, published 28 Jul 2026) - [CVE-2026-48393: Adobe Bridge out-of-bounds write code execution](https://junglewise.ai/threats/cve-2026-48393-adobe-bridge-out-of-bounds-write-code-execution) (high, CVSS 7.8, published 28 Jul 2026) - [CVE-2026-48392: Adobe Bridge out-of-bounds write arbitrary code execution](https://junglewise.ai/threats/cve-2026-48392-adobe-bridge-out-of-bounds-write-arbitrary-code-execution) (high, CVSS 7.8, published 28 Jul 2026) - [CVE-2026-48391: Adobe Bridge untrusted search path in file handling](https://junglewise.ai/threats/cve-2026-48391-adobe-bridge-untrusted-search-path-in-file-handling) (high, CVSS 8.2, published 28 Jul 2026) - [CVE-2026-48390: Adobe Bridge privilege escalation via incorrect authorization](https://junglewise.ai/threats/cve-2026-48390-adobe-bridge-privilege-escalation-via-incorrect-authorization) (high, CVSS 8.2, published 28 Jul 2026) - [CVE-2026-48374: Adobe Bridge path traversal arbitrary file read](https://junglewise.ai/threats/cve-2026-48374-adobe-bridge-path-traversal-arbitrary-file-read) (high, CVSS 7.8, published 28 Jul 2026) - [CVE-2026-48343: Adobe Bridge out-of-bounds write](https://junglewise.ai/threats/cve-2026-48343-adobe-bridge-out-of-bounds-write) (high, CVSS 7.8, published 14 Jul 2026) - [CVE-2026-48342: Adobe Bridge integer overflow in file processing](https://junglewise.ai/threats/cve-2026-48342-adobe-bridge-integer-overflow-in-file-processing) (high, CVSS 7.8, published 14 Jul 2026) - [CVE-2026-48341: Adobe Bridge out-of-bounds write](https://junglewise.ai/threats/cve-2026-48341-adobe-bridge-out-of-bounds-write) (high, CVSS 7.8, published 14 Jul 2026) - [CVE-2026-48340: Adobe Bridge untrusted pointer dereference](https://junglewise.ai/threats/cve-2026-48340-adobe-bridge-untrusted-pointer-dereference) (high, CVSS 7.8, published 14 Jul 2026) - [CVE-2026-48339: Adobe Bridge heap overflow in file processing](https://junglewise.ai/threats/cve-2026-48339-adobe-bridge-heap-overflow-in-file-processing) (high, CVSS 7.8, published 14 Jul 2026) - [CVE-2026-48311: Adobe Bridge out-of-bounds write](https://junglewise.ai/threats/cve-2026-48311-adobe-bridge-out-of-bounds-write) (high, CVSS 7.8, published 14 Jul 2026) ## Most severe Adobe Bridge vulnerabilities - [CVE-2026-48396: Adobe Bridge incorrect authorization code execution](https://junglewise.ai/threats/cve-2026-48396-adobe-bridge-incorrect-authorization-code-execution) (high, CVSS 8.6, published 28 Jul 2026) - [CVE-2026-48395: Adobe Bridge untrusted search path arbitrary code execution](https://junglewise.ai/threats/cve-2026-48395-adobe-bridge-untrusted-search-path-arbitrary-code-execution) (high, CVSS 8.6, published 28 Jul 2026) - [CVE-2026-48391: Adobe Bridge untrusted search path in file handling](https://junglewise.ai/threats/cve-2026-48391-adobe-bridge-untrusted-search-path-in-file-handling) (high, CVSS 8.2, published 28 Jul 2026) - [CVE-2026-48390: Adobe Bridge privilege escalation via incorrect authorization](https://junglewise.ai/threats/cve-2026-48390-adobe-bridge-privilege-escalation-via-incorrect-authorization) (high, CVSS 8.2, published 28 Jul 2026) - [CVE-2026-21283: Adobe Bridge heap buffer overflow](https://junglewise.ai/threats/cve-2026-21283-adobe-bridge-heap-buffer-overflow) (high, CVSS 7.8, published 13 Jan 2026) - [CVE-2026-27312: Adobe Bridge heap buffer overflow in file processing](https://junglewise.ai/threats/cve-2026-27312-adobe-bridge-heap-buffer-overflow-in-file-processing) (high, CVSS 7.8, published 14 Apr 2026) - [CVE-2026-27311: Adobe Bridge heap overflow in file processing](https://junglewise.ai/threats/cve-2026-27311-adobe-bridge-heap-overflow-in-file-processing) (high, CVSS 7.8, published 14 Apr 2026) - [CVE-2026-27310: Adobe Bridge heap buffer overflow in file processing](https://junglewise.ai/threats/cve-2026-27310-adobe-bridge-heap-buffer-overflow-in-file-processing) (high, CVSS 7.8, published 14 Apr 2026) - [CVE-2026-34630: Adobe Bridge heap overflow in file processing](https://junglewise.ai/threats/cve-2026-34630-adobe-bridge-heap-overflow-in-file-processing) (high, CVSS 7.8, published 14 Apr 2026) - [CVE-2026-27313: Adobe Bridge heap overflow in file processing](https://junglewise.ai/threats/cve-2026-27313-adobe-bridge-heap-overflow-in-file-processing) (high, CVSS 7.8, published 14 Apr 2026) ## Vulnerabilities per week 4 vulnerabilities in the last four weeks, down 43% on the four before (7). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 7 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 4 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Adobe technologies - [Adobe ColdFusion](https://junglewise.ai/threats/technologies/coldfusion): 95 vulnerabilities - [Adobe Experience Manager](https://junglewise.ai/threats/technologies/adobe-experience-manager): 74 vulnerabilities - [Adobe Commerce](https://junglewise.ai/threats/technologies/commerce): 72 vulnerabilities - [Adobe Acrobat](https://junglewise.ai/threats/technologies/acrobat): 65 vulnerabilities - [Adobe Acrobat Reader](https://junglewise.ai/threats/technologies/acrobat-reader): 60 vulnerabilities - [Adobe Flash Player](https://junglewise.ai/threats/technologies/flash-player): 56 vulnerabilities - [Adobe AIR](https://junglewise.ai/threats/technologies/air): 55 vulnerabilities - [Adobe C2pa](https://junglewise.ai/threats/technologies/c2pa): 52 vulnerabilities - [Adobe C2pa-Web](https://junglewise.ai/threats/technologies/c2pa-web): 51 vulnerabilities - [Adobe Content Credentials Rust SDK](https://junglewise.ai/threats/technologies/content-credentials-rust-sdk): 44 vulnerabilities - [Adobe Content Credentials JS SDK](https://junglewise.ai/threats/technologies/content-credentials-js-sdk): 42 vulnerabilities - [Adobe Acrobat DC](https://junglewise.ai/threats/technologies/acrobat-dc): 41 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Adobe Bridge vulnerabilities", https://junglewise.ai/threats/technologies/bridge, 13 November 2026.