CVE-2026-47912: Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Adobe Acrobat Readerfrom your environment.Uninstall Acrobat Reader from systems where it is not required to eliminate exposure to the vulnerable component.
- Compensating control
Prevent users from opening potentially malicious PDFs by blocking or filtering PDF attachments at the email gateway and web proxy, quarantining suspicious PDF files, and restricting downloads of PDFs from untrusted sources.
- Operational
Notify and train users to avoid opening PDF files from unknown or untrusted sources; if a suspicious PDF is received, open it only in a validated isolated/sandbox environment and scan it with updated malware detection tools.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47912?
CVE-2026-47912 has a high severity rating of 7.8.
How do I fix CVE-2026-47912?
To fix CVE-2026-47912, users should upgrade to the latest version of Adobe Acrobat Reader that is not affected by this vulnerability.
What are the affected versions of Adobe Acrobat Reader for CVE-2026-47912?
CVE-2026-47912 affects Adobe Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier.
What type of vulnerability is CVE-2026-47912?
CVE-2026-47912 is a Use After Free vulnerability, classified under CWE-416.
What is the potential impact of exploiting CVE-2026-47912?
Exploitation of CVE-2026-47912 could lead to arbitrary code execution in the context of the current user.