Skip to content
OpenAdvisories
High · 8.2 CVE-2026-81994 EUVD-2026-74204GHSA-48q3-3jc4-wq7c

Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

Published Sep 8, 2026 · Updated Sep 10, 2026 · Assigned by adobe

Description

Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Affected products

VendorProductAffectedFixed
Adobe Adobe Acrobat ≤ 26.002.21900 26.002.21901
Adobe Acrobat Reader ≤ 26.002.21900 26.002.21901
Adobe Acrobat 2024 ≤ 24.001.30383 24.001.30429

Advisories 1

References