CVE-2026-79907: Double Free (CWE-415) in Adobe Adobe Acrobat

CVE-2026-79907 is a double free vulnerability (CWE-415) in Adobe Acrobat that can lead to arbitrary code execution in the context of the current user. Exploitation requires the victim to open a malicious file, triggering the double free condition. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild. No vendor advisory or patch information is provided in the input data.

Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system. The attack requires user interaction (opening a malicious file). The vulnerability impacts confidentiality, integrity, and availability at a high level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should avoid opening files from untrusted sources and apply standard security best practices to limit exposure.