Cyber Posture

CVE-2026-27310

High

Published: 14 April 2026

Published
14 April 2026
Modified
15 April 2026
KEV Added
Patch
CVSS Score 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.0001 0.9th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2026-27310 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Adobe Bridge. Its CVSS base score is 7.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked at the 0.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-16 (Memory Protection) and SI-2 (Flaw Remediation).

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploitation for Client Execution (T1203) and 1 other technique. What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

Directly remediates the heap-based buffer overflow vulnerability in Adobe Bridge through timely identification, testing, and application of vendor security patches.

prevent

Implements system memory protections such as ASLR, DEP, and heap canaries to prevent arbitrary code execution resulting from the heap-based buffer overflow.

preventdetect

Deploys malicious code protection mechanisms to scan and block malicious files that exploit the buffer overflow when opened in Adobe Bridge.

MITRE ATT&CK Enterprise TechniquesAI

T1203 Exploitation for Client Execution Execution
Adversaries may exploit software vulnerabilities in client applications to execute code.
T1204.002 Malicious File Execution
An adversary may rely upon a user opening a malicious file in order to gain execution.
Why these techniques?

Heap buffer overflow in client application (Adobe Bridge) enables arbitrary code execution upon opening a malicious file, directly mapping to client-side exploitation and user-executed malicious file techniques.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

NVD Description

Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must…

more

open a malicious file.

Deeper analysisAI

CVE-2026-27310 is a heap-based buffer overflow vulnerability (CWE-122) affecting Adobe Bridge versions 16.0.2, 15.1.4, and earlier. Published on 2026-04-14, this flaw could result in arbitrary code execution in the context of the current user.

Exploitation requires local access (AV:L) with low complexity (AC:L) and no privileges (PR:N), but user interaction is necessary as the victim must open a malicious file (UI:R). Successful exploitation allows an attacker to achieve high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H) within the same security scope (S:U), earning a CVSS 3.1 base score of 7.8.

Adobe's security bulletin APSB26-39 provides details on the vulnerability and is available at https://helpx.adobe.com/security/products/bridge/apsb26-39.html.

Details

CWE(s)

Affected Products

adobe
bridge
≤ 15.1.5 · 16.0 — 16.0.3

CVEs Like This One

CVE-2026-27312Same product: Adobe Bridge
CVE-2026-27313Same product: Adobe Bridge
CVE-2026-34630Same product: Adobe Bridge
CVE-2026-27311Same product: Adobe Bridge
CVE-2026-21283Same product: Adobe Bridge
CVE-2026-27238Same product: Apple Macos
CVE-2026-21346Same product: Adobe Bridge
CVE-2026-21277Same product: Apple Macos
CVE-2026-21347Same product: Adobe Bridge
CVE-2025-27171Same product: Apple Macos

References