CVE-2026-81979: Acrobat Reader | Out-of-bounds Write (CWE-787)

Q: Who is exposed to this issue?

Users of Adobe Acrobat Reader are exposed when they open a malicious file. Successful exploitation runs code in the context of the current user.

Q: What does an attacker need to exploit it?

An attacker must persuade or otherwise cause a victim to open a malicious file. The supplied data does not indicate any additional authentication or privilege requirement.

Published Sep 8, 2026

Updated

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Software

6 affected components

Adobe Acrobat Reader

All of the following

Any of the following

Adobe Acrobat>=24.001.20604<24.001.30429

Adobe Acrobat DC>=15.008.20082<26.002.21901

Adobe Acrobat Reader DC>=15.008.20082<26.002.21901

Any of the following

Apple macOS

Microsoft Windows

Event History

Sep 8, 2026

CVE Published

via MITRE·08:30 PM

Data Sourced

via MITRE·08:30 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:18 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Who is exposed to this issue?

Users of Adobe Acrobat Reader are exposed when they open a malicious file. Successful exploitation runs code in the context of the current user.

What does an attacker need to exploit it?