CVE-2026-81996: Incorrect Authorization (CWE-863) in Adobe Adobe Acrobat

CVE-2026-81996 is an Incorrect Authorization vulnerability in Adobe Acrobat that permits privilege escalation by a low-privileged attacker. The flaw does not require user interaction and results in a changed security scope, enabling the attacker to gain elevated access. The CVSS 3.1 vector indicates local attack vector with low complexity, requiring low privileges and no user interaction, with scope changed and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker with low privileges to escalate their access rights, potentially leading to full system compromise including confidentiality, integrity, and availability of the affected system. The vulnerability does not require user interaction, increasing the risk of automated or stealthy exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Monitor Adobe's security advisories for updates and apply patches once available.