CVE-2026-79908: Out-of-bounds Write (CWE-787) in Adobe Adobe Acrobat

CVE-2026-79908 is an out-of-bounds write vulnerability (CWE-787) in Adobe Acrobat that allows an attacker to execute arbitrary code in the context of the current user. Exploitation requires the victim to open a malicious file, enabling the attacker to potentially compromise the affected system. The vulnerability affects Adobe Acrobat versions up to 26.002.21900 and 24.001.30383. The CVSS v3.1 base score is 7.8, reflecting high impact with local attack vector, low attack complexity, no privileges required, and user interaction needed.

Successful exploitation can result in arbitrary code execution with the privileges of the current user, potentially leading to full compromise of the affected user's environment. The vulnerability impacts confidentiality, integrity, and availability of the system. However, exploitation requires user interaction (opening a malicious file), which limits the attack vector to targeted or socially engineered attacks.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the Adobe vendor advisory for current remediation guidance. Until a patch is available, users should avoid opening files from untrusted sources and apply general security best practices.