CVE-2026-47924: Acrobat Reader | Use After Free (CWE-416)
Published Jun 9, 2026
·Updated
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
8 affected components
Adobe Acrobat Reader<=24.001.30365, <=26.001.21651
All of the following
Any of the following
Adobe Acrobat DC>=15.008.20082<26.001.21662
Adobe Acrobat Reader DC>=15.008.20082<26.001.21662
Any of the following
Apple macOS
Microsoft Windows
All of the following
Adobe Acrobat>=24.0.0<24.001.30383
Any of the following
Apple macOS
Microsoft Windows
Event History
Jun 9, 2026
CVE Published
via MITRE·08:01 PM
Data Sourced
via MITRE·08:01 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-47924?
CVE-2026-47924 has a medium severity rating of 5.5.
2
How do I fix CVE-2026-47924?
To fix CVE-2026-47924, users should update Adobe Acrobat Reader to the latest version.
3
What type of vulnerability is CVE-2026-47924?
CVE-2026-47924 is classified as a Use After Free vulnerability (CWE-416).
4
What could happen if CVE-2026-47924 is exploited?
If CVE-2026-47924 is exploited, it could lead to the disclosure of sensitive memory information.
5
What versions of Adobe Acrobat Reader are affected by CVE-2026-47924?
Adobe Acrobat Reader versions 24.001.30365, 26.001.21651, and earlier are affected by CVE-2026-47924.