This vulnerability (CVE-2026-47913) in Adobe Acrobat Reader is a use-after-free (CWE-416) issue present in versions up to 24.001.30365 and 26.001.21651. It enables an attacker to execute arbitrary code with the current user's privileges by convincing the user to open a maliciously crafted file. The attack vector requires local access and user interaction. The CVSS v3.1 base score is 7.8, indicating high severity. No official patch or remediation level has been published yet, and no known exploits are reported in the wild.

Successful exploitation can lead to arbitrary code execution with the privileges of the current user, potentially compromising the affected system. The vulnerability requires user interaction to open a malicious file, limiting remote exploitation without user involvement. The impact includes confidentiality, integrity, and availability being fully compromised (high impact on all three).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources and consider disabling or restricting the use of Adobe Acrobat Reader for untrusted documents. Monitor Adobe's official security advisories for updates on patches or mitigations.