CVE-2026-47965 is an out-of-bounds write vulnerability affecting Adobe Acrobat Reader versions up to 24.001.30365 and 26.001.21651. The vulnerability could be exploited by an attacker to execute arbitrary code in the context of the current user, contingent on the victim opening a malicious file. The CVSS 3.1 vector indicates the attack requires local access with low complexity, no privileges, and user interaction, impacting confidentiality, integrity, and availability with high severity. No official patch or remediation level has been confirmed from the vendor advisory or patch links provided.

Successful exploitation could lead to arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability of the affected system. The attack requires user interaction by opening a malicious file, limiting remote exploitation without user involvement.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening files from untrusted sources and consider applying any available security workarounds or updates provided by Adobe.