CVE-2026-48390

{
  "id": "CVE-2026-48390",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-28T19:17:35.123",
  "lastModified": "2026-10-23T23:10:00.157",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed."
    },
    {
      "lang": "es",
      "value": "Bridge se ve afectado por una vulnerabilidad de autorización incorrecta que podría resultar en escalada de privilegios. Un atacante podría aprovechar esta vulnerabilidad para obtener acceso de lectura y escritura no autorizado. La explotación de este problema requiere interacción del usuario en que una víctima debe abrir un archivo malicioso. El alcance ha cambiado."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Adobe",
          "product": "Adobe Bridge",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "16.0.5",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "16.0.6",
              "versionType": "semver",
              "status": "unaffected"
            }
          ]
        },
        {
          "vendor": "Adobe",
          "product": "Adobe Bridge",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "15.1.6",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "15.1.7",
              "versionType": "semver",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
          "baseScore": 8.2,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.8
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-29T03:56:03.737262Z",
          "id": "CVE-2026-48390",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-863"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "15.1.7",
              "matchCriteriaId": "DEF5C6C7-6656-44EE-8029-AA9E7FE8FDDC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "16.0",
              "versionEndExcluding": "16.0.6",
              "matchCriteriaId": "C0BD25A0-EC54-4A0B-A701-EDF860692A7F"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://helpx.adobe.com/security/products/bridge/apsb26-89.html",
      "source": "[email protected]",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    }
  ]
}