IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
8.2Yüksek

CVE-2026-81994Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024 Yayım: (2 ay önce)

Açıklama

Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Zayıflık türü (CWE): CWE-1321

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
adobe acrobat 24.001.20604 – < 24.001.30429
Adobe Acrobat 2024 ≤ 24.001.30383, fixed 24.001.30429
adobe acrobat dc 15.008.20082 – < 26.002.21901
Adobe Acrobat Reader ≤ 26.002.21900, fixed 26.002.21901
adobe acrobat reader dc 15.008.20082 – < 26.002.21901
Adobe Adobe Acrobat ≤ 26.002.21900, fixed 26.002.21901

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (3)
  • cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* ≥ 24.001.20604 < 24.001.30429
  • cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 < 26.002.21901
  • cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 < 26.002.21901

Aynı üründe son açıklar — Adobe Acrobat / Reader

8.8Yüksek
CVE-2026-100134

Acrobat for Edge | Out-of-bounds Write (CWE-787)

Adobe Acrobat for Edge

Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

4.3Orta
CVE-2026-100132

Acrobat for Edge | Out-of-bounds Read (CWE-125)

Adobe Acrobat for Edge

Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in tha…

5.5Orta
CVE-2026-81984

Acrobat Reader | Use After Free (CWE-416)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a vic…

7.8Yüksek
CVE-2026-81989

Acrobat Reader | Use After Free (CWE-416)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

5.5Orta
CVE-2026-81991

Acrobat Reader | Out-of-bounds Read (CWE-125)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that …

7.8Yüksek
CVE-2026-81980

Acrobat Reader | Out-of-bounds Write (CWE-787)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.