CVE-2026-81981: Acrobat Reader | Out-of-bounds Write (CWE-787)

Q: Who is exposed to exploitation?

Users of Adobe Acrobat Reader who open a malicious file are exposed. Successful exploitation can execute arbitrary code in the context of the current user.

Q: Does exploitation require prior access or user interaction?

No prior privileges are required, but exploitation requires user interaction. The victim must open a malicious file.

Published Sep 8, 2026

Updated

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Software

6 affected components

Adobe Acrobat Reader

All of the following

Any of the following

Adobe Acrobat>=24.001.20604<24.001.30429

Adobe Acrobat DC>=15.008.20082<26.002.21901

Adobe Acrobat Reader DC>=15.008.20082<26.002.21901

Any of the following

Apple macOS

Microsoft Windows

Event History

Sep 8, 2026

CVE Published

via MITRE·08:30 PM

Data Sourced

via MITRE·08:30 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:18 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Who is exposed to exploitation?

Users of Adobe Acrobat Reader who open a malicious file are exposed. Successful exploitation can execute arbitrary code in the context of the current user.

Does exploitation require prior access or user interaction?