Prototype Pollution in Adobe Acrobat Reader Allows Unauthorized File Access

CVE-2026-81994

What is CVE-2026-81994?

Adobe Acrobat Reader is susceptible to a Prototype Pollution vulnerability that could facilitate unauthorized access to sensitive files and directories. This issue arises when an attacker manipulates the object's prototype attributes, resulting in arbitrary file system read capabilities. To exploit this vulnerability, the victim must interact with a malicious file, which can disrupt the intended access control and lead to significant security risks.

References