CVE-2026-47911 is an out-of-bounds write vulnerability in Adobe Acrobat Reader affecting versions 24.001.30365, 26.001.21651 and earlier. The vulnerability allows an attacker to write outside the intended memory bounds, potentially leading to arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file. The CVSS 3.1 base score is 7.8, indicating high severity with local attack vector, low attack complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability.

Successful exploitation could result in arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability of the affected system. However, exploitation requires the victim to open a malicious file, limiting the attack vector to user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time. Users should exercise caution when opening files from untrusted sources until a patch is available.