Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2960 articles · 110877 vulns · 36/41 feeds (7d)
← Back to list
7.8
CVE-2026-27312EXPLOITEDPATCHED
adobe · bridge

Bridge | Heap-based Buffer Overflow (CWE-122)

Description

Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Products

VendorProductVersions
adobebridge0

References

  • https://helpx.adobe.com/security/products/bridge/apsb26-39.html(vendor-advisory)

Related News (1 articles)

Tier C
VulDB3h ago
CVE-2026-27312 | Adobe Bridge up to 15.1.4/16.0.2 File heap-based overflow (apsb26-39)
→ No new info (linked only)
CVSS 3.17.8 CRITICAL
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
https://helpx.adobe.com/security/products/bridge/apsb26-39.html
CWECWE-122
PublishedApr 14, 2026
Last enriched2h agov2
Tags
CVE-2026-27312
Trending Score54
Source articles1
Independent1
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-34621EXPKEV
Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
Trending: 144
CRITICALCVE-2026-27311EXP
Bridge | Heap-based Buffer Overflow (CWE-122)
Trending: 54
CRITICALCVE-2026-27310EXP
Bridge | Heap-based Buffer Overflow (CWE-122)
Trending: 54
CRITICALCVE-2026-27243EXP
Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
Trending: 53
CRITICALCVE-2026-27246EXP
Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)
Trending: 53

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 14, 2026
Discovered by ZDM
Apr 14, 2026
Actively Exploited
Apr 14, 2026
Patch Available
Apr 14, 2026
Updated: severity, activelyExploited, tags
Apr 14, 2026

Version History

v2
Last enriched 2h ago
v2Tier C2h ago

Updated severity to CRITICAL, marked as actively exploited, and noted that no exploit exists.

severityactivelyExploitedtags
via VulDB
v14h ago

Initial creation