CVE-2026-47916: Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Because exploitation requires user interaction (the victim must open a malicious file), mitigate risk by preventing or reducing exposure to malicious PDFs: restrict or block opening PDFs from untrusted sources, enforce email gateway scanning and attachment filtering for PDFs, and use anti-malware/ sandboxing to inspect PDF attachments before delivery to users. Additionally, train users not to open suspicious or unexpected PDF files.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47916?
CVE-2026-47916 has a severity rating of 7.8, which is categorized as high.
How do I fix CVE-2026-47916?
To fix CVE-2026-47916, update Adobe Acrobat Reader to the latest version available that addresses this vulnerability.
What software is affected by CVE-2026-47916?
CVE-2026-47916 affects Adobe Acrobat Reader versions 24.001.30365, 26.001.21651, and earlier versions.
What type of vulnerability is CVE-2026-47916?
CVE-2026-47916 is classified as a Use After Free vulnerability, specifically identified as CWE-416.
What are the potential risks of CVE-2026-47916?
The potential risks of CVE-2026-47916 include arbitrary code execution in the context of the current user after interacting with a malicious file.