CVE-2026-100134: Out-of-bounds Write (CWE-787) in Adobe Acrobat for Edge

Adobe Acrobat for Edge contains an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution in the context of the current user. The vulnerability requires a victim to open a malicious file to be exploited. The CVSS 3.1 base score is 8.8, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is provided beyond a Microsoft vulnerability guide link.

Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the user's environment. The attack requires user interaction (opening a malicious file), which limits automatic exploitation but still poses a significant risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix is indicated in the provided data, users should exercise caution when opening files from untrusted sources and monitor vendor advisories for updates.