CVE-2026-81990: Acrobat Reader | Use After Free (CWE-416)
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
The attacker must convince a victim to open a malicious file in Acrobat Reader. Successful exploitation can result in arbitrary code execution in the context of the current user.
What level of access does an attacker need before exploitation?
No prior privileges are required, but exploitation requires local attack vector access and user interaction. The victim must open the attacker-controlled file.
What is the potential impact if exploitation succeeds?
An attacker could execute arbitrary code with the permissions of the user currently running Acrobat Reader. Confidentiality, integrity, and availability impacts are rated high.