CVE-2026-81986: Use After Free (CWE-416) in Adobe Adobe Acrobat

This vulnerability (CWE-416) in Adobe Acrobat Reader involves a Use After Free condition that allows an attacker to execute arbitrary code in the context of the current user. Successful exploitation requires the victim to open a crafted malicious file, enabling potential compromise of confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.8, reflecting local attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

An attacker who successfully exploits this vulnerability can execute arbitrary code with the same privileges as the current user, potentially leading to full compromise of the affected system's user context. The requirement for user interaction limits the attack vector to scenarios where the victim opens a malicious file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening files from untrusted sources. No vendor advisory or patch links are provided in the current data.