EUVD-2026-35822
GHSA-hc4r-h68v-6hhh
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Primary rating from Vendor (adobe) · only source for this CVE.
CVSS VectorVendor: adobe
Lifecycle Timeline
1DescriptionCVE.org
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Out-of-bounds read in Adobe Acrobat Reader versions 24.001.30365 and 26.001.21651 and earlier exposes sensitive memory contents to an attacker who can deliver a malicious PDF to a victim. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms low complexity with no privilege prerequisite, but requires local file execution - the victim must open the crafted document. Confidentiality impact is rated High (C:H) with no integrity or availability consequence, making this a targeted information disclosure risk with no public exploit identified at time of analysis and no CISA KEV listing.
Technical ContextAI
CWE-125 (Out-of-Bounds Read) describes a condition where the PDF parsing engine in Acrobat Reader reads memory beyond the bounds of an allocated buffer, exposing adjacent heap or stack memory to the caller. The vulnerability resides in Adobe Acrobat Reader's document rendering pipeline as identified by CPE cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*. Note that the input tags this as 'Buffer Overflow,' but CWE-125 is a read-side primitive, not a write overflow - the distinction matters because OOB reads typically yield information disclosure rather than code execution, consistent with the CVSS I:N/A:N scoring. The attack surface is the PDF file format's complex object and stream structures, which are a historically rich source of memory safety issues in Acrobat.
RemediationAI
Patch available per vendor advisory APSB26-63 at https://helpx.adobe.com/security/products/acrobat/apsb26-63.html - update Acrobat Reader to the version specified in that bulletin as the fixed release; exact patched version numbers were not included in the available intelligence and should be confirmed directly from the Adobe advisory before deploying. As a compensating control pending patching, configure Adobe Acrobat Reader in Protected View mode (Edit > Preferences > Security (Enhanced) > Enable Protected View for 'All files'), which sandboxes file rendering and limits the exploitability of memory disclosure primitives. Additionally, consider enforcing application allowlisting or email gateway policies that quarantine unexpected PDF attachments to reduce the delivery surface. Protected View adds a marginal usability friction but does not prevent legitimate document viewing.
More in Acrobat Reader
View allBuffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attacke
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass inten
Multiple heap-based buffer overflows in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows
Buffer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attacke
Buffer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attacke
Multiple stack-based buffer overflows in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and M
Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.
Integer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attack
Integer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attack
Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X a
Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitra
Heap-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X a
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today