CVE-2026-47959
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Risk Assessment
This vulnerability poses a risk of arbitrary code execution, which could lead to an attacker gaining control over the system. Organizations should be aware that users may inadvertently open infected files.
Recommendation
It is recommended to update Acrobat Reader to the latest version to mitigate the risk associated with this vulnerability. Additionally, users should be educated about opening files from unknown sources.
Original NVD description (English source)
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.