CVE-2026-47918
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could allow remote code execution in the context of the current user. User interaction is required – opening a malicious file.
Risk Assessment
The organization is at risk of workstation compromise after a user opens a malicious PDF file, potentially leading to data theft or further attack propagation.
Recommendation
Update Acrobat Reader to the latest available version.
Other vulnerabilities in Acrobat Reader
See all- CVE-2026-48373High
Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
- CVE-2026-47965High
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
- CVE-2026-47961Medium
Out-of-bounds read vulnerability in Acrobat Reader (versions 24.001.30365, 26.001.21651 and earlier). An attacker can leverage this to disclose sensitive memory contents. User interaction is required – the victim must open a malicious file.
- CVE-2026-47959High
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a stack-based buffer overflow vulnerability. This could allow arbitrary code execution in the context of the current user after opening a malicious file.
- CVE-2026-47955High
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability. This could allow arbitrary code execution in the context of the current user after opening a malicious file.
- CVE-2026-47952High
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a heap-based buffer overflow vulnerability. This could allow arbitrary code execution in the context of the current user after opening a malicious file.
- CVE-2026-47925Medium
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. Exploitation requires user interaction – opening a malicious file.
- CVE-2026-47923Medium
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
- CVE-2026-47921High
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability. This could allow arbitrary code execution in the context of the current user after opening a malicious file.
- CVE-2026-47920High
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability. This could allow arbitrary code execution in the context of the current user after opening a malicious file.
Original NVD description (English source)
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.