CVE-2026-27312 is a heap-based buffer overflow vulnerability (CWE-122) affecting Adobe Bridge versions 16.0.2, 15.1.4, and earlier. This vulnerability allows an attacker to execute arbitrary code in the context of the current user if the victim opens a specially crafted malicious file. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. The attack vector requires local user interaction (opening a file), with low attack complexity and no privileges required prior to exploitation. The vulnerability is publicly disclosed but no official fix or patch has been confirmed yet.

Successful exploitation could result in arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability of the affected system. Since exploitation requires user interaction, the risk is mitigated somewhat by user behavior controls. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources and consider restricting access to Adobe Bridge or using application control policies to limit exposure.