Adobe Bridge versions 16.0.2, 15.1.4, and earlier contain a heap-based buffer overflow vulnerability (CWE-122) identified as CVE-2026-34630. This vulnerability can lead to arbitrary code execution in the context of the current user upon opening a malicious file. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. Exploitation requires user interaction and local access to open the malicious file. No patch or official remediation level has been disclosed by Adobe as of the publication date.

Successful exploitation could result in arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability of the affected system. Since exploitation requires user interaction, the risk is mitigated by user caution but remains significant due to the high severity score.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid opening untrusted or suspicious files with Adobe Bridge. Monitor Adobe's security advisories for updates on patches or mitigations.