CVE-2026-47961
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information, requiring user interaction in that a victim must open a malicious file.
Risk Assessment
Disclosure of sensitive information could lead to serious data security breaches within the organization. The requirement for user interaction increases the risk as users may unknowingly open malicious files.
Recommendation
It is recommended to update Acrobat Reader to the latest version to mitigate this vulnerability. Additionally, users should be educated about the risks associated with opening unknown files.
Original NVD description (English source)
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.