Threat database

Adobe Acrobat contains a heap-based buffer overflow vulnerability that may allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. The issue has a medium severity rating with a CVSS score of 5.5.

Adobe Acrobat contains a double free vulnerability that may allow arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction to be exploited. The issue affects multiple versions of Adobe Acrobat up to 26.002.21900 and 24.001.30383. The vulnerability has a high severity rating with a CVSS score of 7.8.

Adobe Acrobat contains a Use After Free vulnerability (CWE-416) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to and including 26.002.21900 and 24.001.30383. The CVSS 3.1 base score is 7.8, indicating a high severity level.

Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Acrobat contains a Use After Free vulnerability (CWE-416) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. The CVSS 3.1 base score is 7.8, indicating high severity.

Adobe Acrobat contains a Use After Free vulnerability (CWE-416) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. The CVSS v3.1 base score is 7.8, indicating high severity.

Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Acrobat contains a Use After Free vulnerability that may allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects certain versions of Adobe Acrobat up to 26.002.21900 and 24.001.30383. The CVSS score is 5.5, indicating a medium severity level.

CVE-2026-81986 is a Use After Free vulnerability in Adobe Acrobat Reader that can lead to arbitrary code execution with the privileges of the current user. Exploitation requires user interaction by opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. It has a high severity rating with a CVSS score of 7.8.

Adobe Acrobat contains an out-of-bounds write vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction to be exploited and affects certain versions of Adobe Acrobat. The issue is classified as high severity due to its potential impact on confidentiality, integrity, and availability.

Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Acrobat contains an Incorrect Authorization vulnerability (CWE-863) that allows an attacker to bypass security features and gain unauthorized write access. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. The issue changes the security scope and has a medium severity rating with a CVSS score of 6.3.

Adobe Acrobat contains a Use After Free vulnerability (CWE-416) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. The CVSS 3.1 base score is 7.8, indicating a high severity issue.

Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Adobe Acrobat contains a Use After Free vulnerability (CWE-416) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. The CVSS score is 7.8, indicating high severity.

Adobe Acrobat contains an out-of-bounds write vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction to be exploited and affects certain versions of Adobe Acrobat. The vulnerability has a high severity rating with a CVSS score of 7.8.

Adobe Acrobat contains an out-of-bounds read vulnerability (CWE-125) that may allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. The CVSS score is 5.5, indicating a medium severity level.

Adobe Acrobat contains an Incorrect Authorization vulnerability (CWE-863) that allows a low-privileged attacker to escalate privileges without user interaction. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. Exploitation changes the security scope and can lead to full confidentiality, integrity, and availability compromise. The issue is rated high severity with a CVSS score of 8.8.

Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.