---
id: CVE-2026-75655
title: >-
  Bridge is affected by an Uncontrolled Recursion vulnerability that could
  result in arbitrary code execution in the context of the current user
summary: >-
  Bridge is affected by an Uncontrolled Recursion vulnerability that could
  result in arbitrary code execution in the context of the current user. An
  attacker could exploit this vulnerability to execute arbitrary code.
  Exploitation of this …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
cwe:
  - CWE-674
vendor: adobe
product: bridge
affected:
  - bridge < 15.1.8
  - 'bridge >= 16.0, < 16.0.7'
patched:
  - bridge 16.0.7
published: '2026-09-22'
updated: '2026-09-25'
sourceUpdated: '2026-09-25T19:21:20.160'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-75655'
references:
  - url: 'https://helpx.adobe.com/security/products/bridge/apsb26-148.html'
    label: psirt@adobe.com
tags:
  - nvd
  - cve.org
epss: 0.00293
epssPercentile: 0.21804
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-22T19:25:58.474744Z'
ingestedAt: '2026-09-22T19:09:09.998Z'
---

## Overview

Bridge is affected by an Uncontrolled Recursion vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

## Affected

- `bridge < 15.1.8`
- `bridge >= 16.0, < 16.0.7`

## Remediation

Upgrade past the affected range:

- `bridge 16.0.7`