Product:
Bridge
Summary
Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Divide By Zero vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application or render it unresponsive. Exploitation requires user interaction, as a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-27222 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious file that triggers the Divide By Zero condition when opened in the affected version of Bridge. The attacker then needs to convince the victim to open this file, which will lead to the application crashing or becoming unresponsive.
Affected Products
- Bridge 16.0.2: Affected by the Divide By Zero vulnerability leading to potential denial-of-service.
- Bridge 15.1.4: Also vulnerable to the same issue, allowing for application crashes.
Mitigation
To mitigate this vulnerability, users should avoid opening files from untrusted sources and ensure they are using the latest version of Bridge. Adobe may provide patches or updates to address this issue, so keeping the software up to date is essential.