CVE-2026-47924 is a Use After Free vulnerability in Adobe Acrobat Reader affecting versions from 24.0.1.30365 up to and including 26.0.1.21651. The flaw allows an attacker to potentially disclose sensitive memory information when a user opens a crafted malicious file. The vulnerability requires user interaction and does not involve privilege escalation or denial of service. The CVSS 3.1 base score is 5.5, reflecting medium severity with local attack vector, low complexity, no privileges required, and user interaction needed.

Successful exploitation can lead to disclosure of sensitive memory information, potentially exposing confidential data. There is no indication of integrity or availability impact. The vulnerability requires the victim to open a malicious file, limiting the attack vector to user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is currently documented. Users should exercise caution when opening files from untrusted sources until a patch is available.