CVE-2026-81992: Heap-based Buffer Overflow (CWE-122) in Adobe Adobe Acrobat

CVE-2026-81992 is a heap-based buffer overflow vulnerability in Adobe Acrobat that allows an attacker to execute arbitrary code in the context of the current user. Exploitation requires the victim to open a malicious file. The vulnerability affects Adobe Acrobat versions up to 26.002.21900 and 24.001.30383. The CVSS 3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can result in arbitrary code execution with the privileges of the current user, potentially leading to full compromise of the affected system. The attack requires user interaction, specifically opening a malicious file, which limits the attack vector to local or user-initiated scenarios.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid opening files from untrusted sources and apply any recommended security controls from Adobe.