CVE-2026-81997: Incorrect Authorization (CWE-863) in Adobe Adobe Acrobat

CVE-2026-81997 is an Incorrect Authorization vulnerability in Adobe Acrobat that could allow an attacker to bypass security controls and gain unauthorized write access. Exploitation requires the victim to open a malicious file, indicating user interaction is necessary. The vulnerability affects Adobe Acrobat versions up to 26.002.21900 and 24.001.30383. The CVSS 3.1 base score is 6.3, reflecting a medium severity with local attack vector, low attack complexity, no privileges required, user interaction required, changed scope, no confidentiality impact, high integrity impact, and no availability impact.

An attacker who successfully exploits this vulnerability can bypass security features and gain unauthorized write access within the affected Adobe Acrobat application. This could lead to unauthorized modification of data or settings. However, exploitation requires user interaction, limiting the attack vector to scenarios where a user opens a malicious file.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the Adobe vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening files from untrusted sources to avoid triggering the vulnerability.