CVE-2026-100134

HighCVSS 8.8

Published: 20/10/2026(UTC)Updated: 20/10/2026(UTC)Translated: 21/10/2026(UTC)NVD NIST

Summary

Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a malicious file.

Risk Assessment

A user opening a malicious file may trigger arbitrary code execution with their privileges, risking workstation compromise. The risk depends on user interaction.

Recommendation

Update Acrobat for Edge to a patched version. Train users not to open files from untrusted sources.

Other vulnerabilities in Acrobat for Edge

CVE-2026-100132Medium
Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

Original NVD description (English source)

Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS