CVE-2026-47917 is a Use After Free vulnerability affecting Adobe Acrobat Reader up to versions 24.001.30365 and 26.001.21651. The flaw allows arbitrary code execution in the context of the current user upon opening a malicious file. Exploitation requires user interaction. No official patch or remediation level has been confirmed as of the published date. The vulnerability is rated high severity with a CVSS 3.1 base score of 7.8, indicating significant impact on confidentiality, integrity, and availability.

Successful exploitation can lead to arbitrary code execution with the privileges of the current user, potentially compromising the affected system's confidentiality, integrity, and availability. Since user interaction is required, the attack vector is local or via social engineering to open a malicious file. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening files from untrusted sources and consider applying any recommended workarounds from Adobe once available.