CVE-2026-80161: Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843) in Adobe Adobe Acrobat

CVE-2026-80161 is a type confusion vulnerability in Adobe Acrobat Reader that enables an attacker to execute arbitrary code in the context of the current user. This vulnerability arises from accessing a resource using an incompatible type, which can lead to memory corruption or similar issues. Successful exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects Adobe Acrobat versions up to 26.002.21900 and 24.001.30383. No information about available patches or vendor advisories is provided.

An attacker who successfully exploits this vulnerability can execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the user's environment. The attack requires user interaction (opening a malicious file), which limits remote exploitation but still poses a significant risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid opening files from untrusted sources and consider applying any available security workarounds recommended by Adobe.