7.8High

CVE-2026-81985Acrobat Reader | Use After Free (CWE-416)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024 Published: (2 months ago)

Description

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Weakness (CWE): CWE-416

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
adobe acrobat 24.001.20604 – < 24.001.30429
Adobe Acrobat 2024 ≤ 24.001.30383, fixed 24.001.30429
adobe acrobat dc 15.008.20082 – < 26.002.21901
Adobe Acrobat Reader ≤ 26.002.21900, fixed 26.002.21901
adobe acrobat reader dc 15.008.20082 – < 26.002.21901
Adobe Adobe Acrobat ≤ 26.002.21900, fixed 26.002.21901

References and patches

CPE matches (NVD) (3)

  • cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* ≥ 24.001.20604 < 24.001.30429
  • cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 < 26.002.21901
  • cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 < 26.002.21901