CVE-2026-100126: Out-of-bounds Read (CWE-125) in Adobe Adobe Bridge

CVE-2026-100126 is an out-of-bounds read vulnerability in Adobe Bridge that could lead to disclosure of sensitive information from memory. This vulnerability requires a victim to open a crafted malicious file to be exploited. The flaw affects Adobe Bridge versions up to and including 16.0.7 and 15.1.8. The vulnerability has a CVSS 3.1 base score of 5.5, with an attack vector of local (user interaction required), low attack complexity, no privileges required, and user interaction necessary. The impact is confidentiality loss without integrity or availability impact.

Successful exploitation could disclose sensitive memory contents to an attacker, potentially revealing confidential information. There is no impact on integrity or availability. Exploitation requires user interaction, limiting the attack vector to scenarios where a user opens a malicious file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should avoid opening untrusted or suspicious files in Adobe Bridge. Monitor Adobe's official security advisories for updates regarding a fix.