CVE-2026-47915: Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Acrobat Readerfrom your environment.Uninstall Acrobat Reader from systems where it is not required to eliminate exposure to the vulnerability.
- Compensating control
Treat PDF files from untrusted or unsolicited sources as potentially malicious and avoid opening them. Block or quarantine suspicious PDF attachments at the email gateway and ensure endpoint protection/antivirus scans PDF files before allowing users to open them.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47915?
The severity of CVE-2026-47915 is high, rated at 7.8.
How do I fix CVE-2026-47915?
To fix CVE-2026-47915, update Adobe Acrobat Reader to the latest version available.
What impact does CVE-2026-47915 have on my system?
CVE-2026-47915 can result in arbitrary code execution within the user’s context if exploited.
What versions of Adobe Acrobat Reader are affected by CVE-2026-47915?
Adobe Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by CVE-2026-47915.
Is user interaction required to exploit CVE-2026-47915?
Yes, exploitation of CVE-2026-47915 requires user interaction to open a malicious file.