CVE-2026-47923: Acrobat Reader | Out-of-bounds Read (CWE-125)
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Prevent delivery and execution of potentially malicious files: enable email/web gateway scanning and blocking of suspicious attachments, enforce endpoint antivirus/anti-malware scanning for downloaded files, and restrict automatic opening of attachments from untrusted sources.
- Operational
Inform and train users that exploitation requires opening a malicious file; instruct users not to open files or attachments from unknown or untrusted senders and to verify unexpected files with the sender before opening.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47923?
The severity of CVE-2026-47923 is medium, with a score of 5.5.
How do I fix CVE-2026-47923?
To fix CVE-2026-47923, update Adobe Acrobat Reader to the latest version released after June 9, 2026.
What type of vulnerability is CVE-2026-47923?
CVE-2026-47923 is categorized as an out-of-bounds read vulnerability.
What could be the impact of exploiting CVE-2026-47923?
Exploiting CVE-2026-47923 could lead to the disclosure of sensitive memory information.
Does CVE-2026-47923 require user interaction for exploitation?
Yes, exploitation of CVE-2026-47923 requires user interaction.