This vulnerability in Adobe Bridge involves a heap-based buffer overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Affected versions include 16.0.2, 15.1.4, and earlier. Exploitation requires that the user open a malicious file, which triggers the overflow condition. The CVSS vector indicates local attack vector with low complexity, no privileges required, but user interaction is necessary. The impact includes high confidentiality, integrity, and availability consequences. No official patch or remediation level has been published yet, and no known exploits are reported in the wild.

Successful exploitation can result in arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability of the affected system. Because exploitation requires user interaction, the risk is somewhat mitigated by user behavior, but the impact remains high if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources. Monitor Adobe's security advisories for updates and apply patches promptly once available.