ZDI-CAN-29178: ZDI-26-361: Adobe Acrobat Reader DC Field signatureInfo Use-After-Free Remote Code Execution Vulnerability

Published Jun 24, 2026

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-27278.

Affected Software

1 affected component

Adobe Acrobat Reader DC

Event History

Jun 24, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-29178?

The severity of ZDI-CAN-29178 is rated at 7.8 on the CVSS scale.

How do I fix ZDI-CAN-29178?

To fix ZDI-CAN-29178, ensure that you have the latest version of Adobe Acrobat Reader DC installed with all security patches applied.

What are the potential impacts of ZDI-CAN-29178?

The potential impacts of ZDI-CAN-29178 include remote code execution, allowing attackers to execute arbitrary code on affected systems.

What software is affected by ZDI-CAN-29178?

ZDI-CAN-29178 affects Adobe Acrobat Reader DC.

How can attackers exploit ZDI-CAN-29178?

Attackers can exploit ZDI-CAN-29178 by luring users to open a malicious file or visit a compromised web page.