Use After Free Vulnerability in Adobe Acrobat Reader
CVE-2026-47917

7.8HIGH

Key Information:

Vendor

Adobe
Status
Acrobat Reader
Vendor
CVE Published:
9 June 2026

What is CVE-2026-47917?

Adobe Acrobat Reader has a vulnerability categorized as a Use After Free issue, affecting versions 24.001.30365 and 26.001.21651 and earlier. This flaw can lead to arbitrary code execution within the context of the user's session. Exploitation necessitates user action, as an attacker must entice a victim to open a specially crafted malicious file. It is crucial for users to update their software to mitigate risks associated with this vulnerability.

Affected Version(s)

Acrobat Reader 0 <= 26.001.21651

References

https://helpx.adobe.com/security/products/acrobat/apsb26-...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.