Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-81982: Acrobat Reader may leak private data when opening a file

CVE-2026-81982 · published 1 month ago

Summary

Adobe Acrobat Reader can accidentally reveal information stored in memory if a user opens a specially crafted file. An attacker could use this to see sensitive data from the computer. Install the latest updates from Adobe as soon as they are available to protect against this risk.

What to do

Update adobe acrobat to version 24.001.30429 or later.
Update adobe acrobat_dc to version 26.002.21901 or later.
Update adobe acrobat_reader_dc to version 26.002.21901 or later.

Affected software

Vendor	Product	Affected versions
adobe	adobe acrobat	<= 26.002.21900
adobe	acrobat reader	<= 26.002.21900
adobe	acrobat 2024	<= 24.001.30383
adobe	acrobat	>= 24.001.20604, < 24.001.30429 `cpe:2.3:a:adobe:acrobat:::::classic:::*`
adobe	acrobat_dc	>= 15.008.20082, < 26.002.21901 `cpe:2.3:a:adobe:acrobat_dc:::::continuous:::*`
adobe	acrobat_reader_dc	>= 15.008.20082, < 26.002.21901 `cpe:2.3:a:adobe:acrobat_reader_dc:::::continuous:::*`

Original advisory text

Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

References

https://helpx.adobe.com/security/products/acrobat/apsb26-141.html Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

5.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-125Out-of-bounds Read

Timeline

Published8 Sep 2026

Updated4 Nov 2026

First seen8 Sep 2026

Sources

CVE-2026-81982 · NVD

CVE-2026-81982 · MITRE

Track software like this

Free during beta