Acrobat CVE-2026-27220
HIGHCVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionNVD
Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Arbitrary code execution in Adobe Acrobat Reader and Acrobat (versions 24.001.30307 and earlier) via a use-after-free vulnerability requires victims to open a malicious file. Local attackers can exploit this to execute code with the privileges of the current user. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify and inventory all systems running affected Acrobat Reader versions (24.001.30307, 24.001.30308, 25.001.21265 and earlier) across your organization. Within 7 days: Implement compensating controls including restricting Acrobat Reader usage to trusted documents only, disabling JavaScript in Reader settings, and enforcing group policy restrictions on file types. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today