CVE-2026-47925

Analyzed Analyzed - Analysis Complete

Integer Overflow in Adobe Acrobat Reader

Publication date: 2026-06-09

Last updated on: 2026-06-12

Assigner: Adobe Systems Incorporated

Description

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-09

Last Modified

2026-06-12

Generated

2026-06-30

AI Q&A

2026-06-10

EPSS Evaluated

2026-06-28

NVD

CVE-2026-47925

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	acrobat_dc	From 15.008.20082 (inc) to 26.001.21662 (exc)
adobe	acrobat_reader_dc	From 15.008.20082 (inc) to 26.001.21662 (exc)
adobe	acrobat	From 24.0.0 (inc) to 24.001.30383 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-190	The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

Compliance Impact

The vulnerability in Acrobat Reader is an Integer Overflow or Wraparound that can cause a denial-of-service by crashing the application when a malicious file is opened.

Since this vulnerability leads to denial-of-service without impacting confidentiality or integrity, it does not directly expose sensitive data.

Therefore, based on the provided information, there is no direct indication that this vulnerability affects compliance with standards like GDPR or HIPAA, which primarily focus on data protection and privacy.

Executive Summary

This vulnerability is an Integer Overflow or Wraparound issue found in Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier. It can cause the application to crash when a specially crafted malicious file is opened by the user.

Exploitation requires user interaction, meaning the victim must open a malicious file to trigger the vulnerability.

Impact Analysis

The primary impact of this vulnerability is a denial-of-service condition where the Acrobat Reader application crashes.

This could disrupt normal use of the application and potentially interrupt workflows that depend on Acrobat Reader.

Mitigation Strategies

To mitigate this vulnerability, ensure that Acrobat Reader is updated to a version later than 24.001.30365 or 26.001.21651, as these versions and earlier are affected.

Additionally, avoid opening files from untrusted or unknown sources to prevent exploitation, since the vulnerability requires user interaction by opening a malicious file.

Hi! I’m here to help you understand CVE-2026-47925. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70