CVE-2026-81980: Acrobat Reader | Out-of-bounds Write (CWE-787)

Q: What must an attacker do to exploit this vulnerability?

The attacker must persuade a victim to open a malicious file. Successful exploitation can result in arbitrary code execution in the context of the current user.

Q: What level of access does successful exploitation provide?

Code executes with the privileges of the user who opens the malicious file. The provided information does not indicate that elevated system-level privileges are required or obtained.

Published Sep 8, 2026

Updated

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Software

6 affected components

Adobe Acrobat Reader

All of the following

Any of the following

Adobe Acrobat>=24.001.20604<24.001.30429

Adobe Acrobat DC>=15.008.20082<26.002.21901

Adobe Acrobat Reader DC>=15.008.20082<26.002.21901

Any of the following

Apple macOS

Microsoft Windows

Event History

Sep 8, 2026

CVE Published

via MITRE·08:31 PM

Data Sourced

via MITRE·08:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:18 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What must an attacker do to exploit this vulnerability?

The attacker must persuade a victim to open a malicious file. Successful exploitation can result in arbitrary code execution in the context of the current user.

What level of access does successful exploitation provide?