CVE-2026-27311 is a heap-based buffer overflow vulnerability affecting Adobe Bridge versions 16.0.2, 15.1.4, and earlier. Successful exploitation requires a victim to open a malicious file, which can lead to arbitrary code execution within the context of the current user. The vulnerability is classified under CWE-122 and has a CVSS v3.1 score of 7.8, reflecting high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently provided, and no known exploits have been reported.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system's user context. The requirement for user interaction limits exploitation to scenarios where a user opens a malicious file. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources and consider restricting access to Adobe Bridge or using alternative software if possible.