CVE-2026-47937 is an Uncontrolled Search Path Element vulnerability in Adobe Acrobat Reader. It affects versions 24.001.30365, 26.001.21651, and earlier. The flaw allows an attacker to execute arbitrary code with the privileges of the current user by tricking the user into opening a malicious file. The attack requires user interaction and impacts confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 7.4, indicating high severity. No official patch or remediation level has been published yet, and no known exploits are reported in the wild.

Successful exploitation could lead to arbitrary code execution in the context of the current user, compromising confidentiality and integrity of the affected system. The attack requires user interaction, limiting the attack vector to scenarios where a user opens a crafted malicious file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources. Monitor Adobe's security advisories for updates and apply patches promptly once available.