CVE-2026-75663 is an out-of-bounds write vulnerability in Adobe Bridge that allows an attacker to execute arbitrary code in the context of the current user. Successful exploitation requires the victim to open a crafted malicious file, enabling code execution with user-level privileges. The vulnerability affects Adobe Bridge versions up to and including 16.0.6 and 15.1.7. The CVSS 3.1 vector indicates the attack requires local access with low complexity, no privileges, and user interaction, impacting confidentiality, integrity, and availability.

An attacker who successfully exploits this vulnerability can execute arbitrary code with the same privileges as the current user, potentially leading to full compromise of the affected system under that user's context. The requirement for user interaction limits remote exploitation but does not eliminate risk, especially in environments where malicious files may be opened.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the Adobe vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening files from untrusted sources to avoid triggering the vulnerability.