CVE-2026-47952 is a heap-based buffer overflow vulnerability affecting Adobe Acrobat Reader versions up to 24.001.30365 and 26.001.21651. Successful exploitation requires a user to open a malicious file, potentially leading to arbitrary code execution within the context of the current user. The vulnerability is classified under CWE-122 and has a CVSS v3.1 base score of 7.8, indicating high impact on confidentiality, integrity, and availability. No official patch or remediation level is currently provided by the vendor, and no known exploits are reported in the wild.

Exploitation of this vulnerability can result in arbitrary code execution with the privileges of the current user, potentially compromising system confidentiality, integrity, and availability. Since it requires user interaction (opening a malicious file), the attack vector is local or via social engineering. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources and consider applying any available security controls to limit the impact of potential exploitation.