Incorrect Authorization in Acrobat Reader by Adobe
CVE-2026-81996

8.8HIGH

Key Information:

Vendor

Adobe

Vendor
CVE Published:
8 September 2026

What is CVE-2026-81996?

Adobe Acrobat Reader has a vulnerability that allows low-privileged attackers to exploit an Incorrect Authorization flaw, leading to potential privilege escalation. This security issue can be exploited without requiring any user interaction, thus broadening the attack surface. Users and administrators are advised to ensure their installations are up to date to mitigate any risks associated with this vulnerability.

Affected Version(s)

Acrobat 2024 0 <= 24.001.30383

Acrobat Reader 0 <= 26.002.21900

Adobe Acrobat 0 <= 26.002.21900

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.