CVE-2026-81990: Use After Free (CWE-416) in Adobe Adobe Acrobat

CVE-2026-81990 is a Use After Free vulnerability in Adobe Acrobat Reader that allows an attacker to execute arbitrary code in the context of the current user. Successful exploitation requires the victim to open a crafted malicious file, triggering the vulnerability. The flaw impacts affected versions up to 26.002.21900 and 24.001.30383. The vulnerability has a CVSS 3.1 base score of 7.8 with attack vector local, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability.

An attacker who successfully exploits this vulnerability can execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system's user context. The high CVSS score reflects significant impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should avoid opening files from untrusted sources to prevent exploitation.