CVE-2026-81988: Use After Free (CWE-416) in Adobe Adobe Acrobat

CVE-2026-81988 is a Use After Free vulnerability in Adobe Acrobat that may lead to arbitrary code execution in the context of the current user. Successful exploitation requires the victim to open a crafted malicious file, which triggers the vulnerability. The flaw affects Adobe Acrobat versions up to 26.002.21900 and 24.001.30383. The vulnerability has a CVSS 3.1 score of 7.8, with attack vector local, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability.

An attacker who successfully exploits this vulnerability can execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the user's environment. The requirement for user interaction (opening a malicious file) limits the attack vector to social engineering or targeted delivery of malicious documents.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening files from untrusted sources and consider applying any recommended workarounds from Adobe once the advisory is published.