EUVD-2026-35822
GHSA-hc4r-h68v-6hhh
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Primary rating from Vendor (adobe) · only source for this CVE.
CVSS VectorVendor: adobe
Lifecycle Timeline
1DescriptionCVE.org
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Out-of-bounds read in Adobe Acrobat Reader versions 24.001.30365 and 26.001.21651 and earlier exposes sensitive memory contents to an attacker who can deliver a malicious PDF to a victim. The CVSS vector (AV:L/AC:L/PR:N/UI:R) confirms low complexity with no privilege prerequisite, but requires local file execution - the victim must open the crafted document. Confidentiality impact is rated High (C:H) with no integrity or availability consequence, making this a targeted information disclosure risk with no public exploit identified at time of analysis and no CISA KEV listing.
Technical ContextAI
CWE-125 (Out-of-Bounds Read) describes a condition where the PDF parsing engine in Acrobat Reader reads memory beyond the bounds of an allocated buffer, exposing adjacent heap or stack memory to the caller. The vulnerability resides in Adobe Acrobat Reader's document rendering pipeline as identified by CPE cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*. Note that the input tags this as 'Buffer Overflow,' but CWE-125 is a read-side primitive, not a write overflow - the distinction matters because OOB reads typically yield information disclosure rather than code execution, consistent with the CVSS I:N/A:N scoring. The attack surface is the PDF file format's complex object and stream structures, which are a historically rich source of memory safety issues in Acrobat.
RemediationAI
Patch available per vendor advisory APSB26-63 at https://helpx.adobe.com/security/products/acrobat/apsb26-63.html - update Acrobat Reader to the version specified in that bulletin as the fixed release; exact patched version numbers were not included in the available intelligence and should be confirmed directly from the Adobe advisory before deploying. As a compensating control pending patching, configure Adobe Acrobat Reader in Protected View mode (Edit > Preferences > Security (Enhanced) > Enable Protected View for 'All files'), which sandboxes file rendering and limits the exploitability of memory disclosure primitives. Additionally, consider enforcing application allowlisting or email gateway policies that quarantine unexpected PDF attachments to reduce the delivery surface. Protected View adds a marginal usability friction but does not prevent legitimate document viewing.
More in Acrobat Reader
View allAdobe Flash Player contains a type confusion vulnerability in object handling that allows remote attackers to execute ar
Adobe Reader and Acrobat contain a use-after-free vulnerability in the Doc.media.newPlayer JavaScript method that was ac
Adobe Flash Player 10.2 and earlier across all platforms contain an unspecified vulnerability allowing remote code execu
Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attack
Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute
Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote
Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attacke
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass inten
Multiple heap-based buffer overflows in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows
Buffer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attacke
Buffer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attacke
Multiple stack-based buffer overflows in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and M
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today