CVE-2026-100132: Out-of-bounds Read (CWE-125) in Adobe Acrobat for Edge

Adobe Acrobat for Edge contains an out-of-bounds read vulnerability (CWE-125) that may lead to disclosure of sensitive information from memory. An attacker could exploit this flaw by convincing a user to visit a crafted URL or interact with a malicious web page. The vulnerability affects versions from 0 up to and including 154.0.4258.37. No known exploits are reported in the wild. The CVSS 3.1 base score is 4.3, indicating medium severity, with attack vector network, low attack complexity, no privileges required, user interaction required, and impact limited to confidentiality.

Successful exploitation could disclose sensitive memory contents to an attacker, potentially leaking confidential information. There is no impact on integrity or availability. The attack requires user interaction, limiting the ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should avoid interacting with untrusted URLs or web pages that could trigger this vulnerability until a patch is available.