CVE-2026-47918 is a Use After Free (CWE-416) vulnerability in Adobe Acrobat Reader that affects versions up to 24.001.30365 and 26.001.21651. The flaw allows an attacker to execute arbitrary code with the privileges of the current user by convincing the user to open a specially crafted malicious file. The vulnerability requires user interaction for exploitation and has been assigned a CVSS v3.1 base score of 7.8, indicating high severity. No official patch or remediation level has been published yet, and there are no known exploits in the wild at this time.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code with the same privileges as the current user, potentially leading to full compromise of the affected system. The attack requires user interaction, specifically opening a maliciously crafted file. The vulnerability impacts confidentiality, integrity, and availability as indicated by the CVSS vector (C:H/I:H/A:H).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources and consider applying any available security controls to limit exposure.