CVE-2026-80159: Untrusted Search Path (CWE-426) in Adobe Adobe Acrobat

CVE-2026-80159 is an Untrusted Search Path vulnerability in Adobe Acrobat. This flaw could be exploited by an attacker who already has high privileges to escalate their access further. The attack requires the victim to open a malicious file, and the exploit depends on conditions beyond the attacker's control. The vulnerability affects Adobe Acrobat versions up to 26.002.21900 and 24.001.30383. The CVSS 3.1 base score is 4.0, reflecting a medium severity with attack vector local, high attack complexity, high privileges required, and user interaction needed.

An attacker with high privileges could leverage this vulnerability to gain elevated access on the affected system. However, exploitation requires user interaction and specific conditions, limiting the attacker's ability to exploit this remotely or without user involvement. The confidentiality impact is high, but integrity and availability impacts are not affected.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening files from untrusted sources and limit high privilege access where possible.