This vulnerability (CWE-787) in Adobe Acrobat Reader allows an out-of-bounds write condition that can be triggered when a user opens a maliciously crafted file. Successful exploitation could enable arbitrary code execution under the context of the current user. The affected versions are up to 24.001.30365 and 26.001.21651. The attack vector requires local user interaction (opening a file), with low attack complexity and no privileges required. The vulnerability impacts confidentiality, integrity, and availability with high severity (CVSS 7.8). No official patch or remediation level has been indicated in the provided data.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the user's environment. The attack requires the victim to open a malicious file, so social engineering or user interaction is necessary. The confidentiality, integrity, and availability of the affected system could be severely impacted.

Patch status is not yet confirmed — check the Adobe vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening files from untrusted sources. Monitor Adobe's security advisories for updates regarding patches or mitigations.