This vulnerability in Adobe Acrobat involves incorrect authorization (CWE-863) that enables a low-privileged attacker to escalate privileges. Exploitation does not require user interaction and results in a changed security scope, allowing the attacker to gain elevated access and potentially full control over the affected system. The CVSS 3.1 vector indicates local attack vector with low attack complexity, requiring low privileges and no user interaction, with scope changed and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker with low privileges to escalate their access rights, potentially gaining full control over the affected system. This can lead to complete compromise of confidentiality, integrity, and availability of data and system resources within Adobe Acrobat's context.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published by Adobe at this time.