CVE-2026-81991

Analyzed Analyzed - Analysis Complete

Out-of-Bounds Read in Adobe Acrobat Reader

Publication date: 2026-09-08

Last updated on: 2026-09-10

Assigner: Adobe Systems Incorporated

Description

Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-10

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-81991

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	acrobat_dc	From 15.008.20082 (inc) to 26.002.21901 (exc)
adobe	acrobat_reader_dc	From 15.008.20082 (inc) to 26.002.21901 (exc)
adobe	acrobat	From 24.001.20604 (inc) to 24.001.30429 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds read vulnerability in Acrobat Reader that could allow disclosure of sensitive memory. An attacker would need to trick a user into opening a specially crafted malicious file to exploit it.

Detection Guidance

Detection of this vulnerability typically involves monitoring for suspicious file activity or analyzing files opened with Acrobat Reader. Check for files with unusual extensions or content that trigger the out-of-bounds read. Use system logs to track Acrobat Reader crashes or memory disclosure events.

Impact Analysis

If exploited, this vulnerability could allow an attacker to access sensitive information stored in memory on your system. This might include passwords, encryption keys, or other confidential data.

Mitigation Strategies

Update Acrobat Reader to the latest version as soon as patches are available. Disable PDF opening in web browsers or email clients to reduce exposure. Restrict user permissions to limit access to sensitive memory. Monitor Adobe security advisories for updates.

Hi! I’m here to help you understand CVE-2026-81991. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70