CVE-2026-47959 is a stack-based buffer overflow vulnerability (CWE-121) affecting Adobe Acrobat Reader versions 24.001.30365, 26.001.21651, and earlier. Successful exploitation requires a user to open a malicious file, potentially enabling arbitrary code execution in the context of the current user. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. No official patch or remediation level has been published at this time, and no known exploits in the wild have been reported.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system's user context. Confidentiality, integrity, and availability of the system could be severely impacted. Exploitation requires user interaction by opening a malicious file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening files from untrusted sources and consider applying any recommended temporary mitigations from Adobe once published.