CVE-2026-81994

Adobe Acrobat · Vulnerability

CVSS 3.1 8.2 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-81994

Published

Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-81994

Published

Adobe Acrobat

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "product": "Adobe Acrobat",
                    "vendor": "Adobe",
                    "versions": [
                        {
                            "lessThanOrEqual": "26.002.21900",
                            "status": "affected",
                            "version": "0",
                            "versionType": "custom"
                        },
                        {
                            "status": "unaffected",
                            "version": "26.002.21901",
                            "versionType": "custom"
                        }
                    ]
                }

Acrobat Reader

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "product": "Acrobat Reader",
                    "vendor": "Adobe",
                    "versions": [
                        {
                            "lessThanOrEqual": "26.002.21900",
                            "status": "affected",
                            "version": "0",
                            "versionType": "custom"
                        },
                        {
                            "status": "unaffected",
                            "version": "26.002.21901",
                            "versionType": "custom"
                        }
                    ]
                }

Acrobat 2024

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "product": "Acrobat 2024",
                    "vendor": "Adobe",
                    "versions": [
                        {
                            "lessThanOrEqual": "24.001.30383",
                            "status": "affected",
                            "version": "0",
                            "versionType": "custom"
                        },
                        {
                            "status": "unaffected",
                            "version": "24.001.30429",
                            "versionType": "custom"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON