CVE-2026-81976: Use After Free (CWE-416) in Adobe Adobe Acrobat

CVE-2026-81976 is a Use After Free vulnerability in Adobe Acrobat that may lead to arbitrary code execution in the context of the current user. Successful exploitation requires the victim to open a crafted malicious file. The vulnerability affects Adobe Acrobat versions up to 26.002.21900 and 24.001.30383. The CVSS 3.1 vector indicates the attack requires local access (AV:L), low attack complexity (AC:L), no privileges required (PR:N), user interaction (UI:R), and impacts confidentiality, integrity, and availability with high severity.

An attacker who successfully exploits this vulnerability can execute arbitrary code with the same privileges as the current user, potentially leading to full compromise of the affected system's user context. The requirement for user interaction limits the attack vector to scenarios where a user opens a malicious file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid opening files from untrusted sources and apply any recommended security controls from Adobe.