CVE-2026-75656 is an out-of-bounds read vulnerability (CWE-125) in Adobe Bridge that could lead to disclosure of sensitive memory contents. Successful exploitation requires a victim to open a crafted malicious file, enabling an attacker to access sensitive information from memory. The vulnerability affects Adobe Bridge versions up to 16.0.6 and 15.1.7. The CVSS 3.1 base score is 5.5, reflecting a medium severity with local attack vector, low complexity, no privileges required, user interaction required, and high impact on confidentiality but no impact on integrity or availability.

The vulnerability allows an attacker to disclose sensitive information from memory, potentially compromising confidentiality. There is no impact on integrity or availability. Exploitation requires user interaction, limiting the attack vector to scenarios where a user opens a malicious file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, users should exercise caution when opening files from untrusted sources and monitor Adobe's advisories for updates.