Improper Certificate Validation in Acrobat Reader by Adobe
CVE-2026-27221

5.5MEDIUM

Key Information:

Vendor

Adobe
Status
Acrobat Reader
Vendor
CVE Published:
10 March 2026

What is CVE-2026-27221?

Adobe Acrobat Reader is vulnerable to improper certificate validation, which could allow attackers to bypass security features. This vulnerability may permit an attacker to impersonate the identity of a signer by exploiting the validation flaw. User interaction is required for the exploitation, making it crucial for users to be vigilant when handling documents that may be affected. Keeping Acrobat Reader updated is essential to mitigate the risks associated with this vulnerability.

Affected Version(s)

Acrobat Reader 0 <= 25.001.21265

References

https://helpx.adobe.com/security/products/acrobat/apsb26-...
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.