Out-of-Bounds Read Vulnerability in Acrobat for Edge from Microsoft
CVE-2026-100132

4.3MEDIUM

Key Information:

Vendor

Adobe

Vendor
CVE Published:
20 October 2026

What is CVE-2026-100132?

Acrobat for Edge is susceptible to an out-of-bounds read vulnerability that may allow an attacker to access sensitive memory data. This vulnerability necessitates user interaction, as it can only be exploited through the navigation to a specifically crafted URL or by engaging with a compromised webpage. To mitigate risks, users are advised to avoid suspicious links and ensure their software is updated.

Affected Version(s)

Acrobat for Edge 0 <= 154.0.4258.37

Acrobat for Edge 154.0.4258.48

References

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.