CVE-2026-81985: Use After Free (CWE-416) in Adobe Adobe Acrobat

CVE-2026-81985 is a Use After Free vulnerability in Adobe Acrobat that can lead to arbitrary code execution in the context of the current user. Exploitation requires that a victim opens a specially crafted malicious file. The vulnerability affects Adobe Acrobat versions up to 26.002.21900 and 24.001.30383. The CVSS 3.1 vector indicates local attack vector with low complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the user's environment. However, exploitation requires user interaction (opening a malicious file). There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid opening files from untrusted sources and apply general security best practices. Monitor Adobe's official channels for updates and patches.