Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4588 articles · 224490 vulns · 37/41 feeds (7d)
← Back to list
7.8
CVE-2026-27220PATCHED
adobe · acrobat_dc

Acrobat Reader | Use After Free (CWE-416)

Description

Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Products

VendorProductVersions
adobeacrobat_dc0, 0, 0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
adobeacrobat_reader_dccve_cpe95%
adobeacrobatcve_cpe95%
adobeacrobat reader dccert_advisory90%
adobeacrobat dccert_advisory90%
applemacoscve_cpe95%

References

  • https://helpx.adobe.com/security/products/acrobat/apsb26-26.html(vendor-advisory)

Related News (3 articles)

Tier B
JPCERT/CC
Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-26)
→ No new info (linked only)
Tier B
BSI Advisories96d ago
[UPDATE] [mittel] Adobe Acrobat DC: Mehrere Schwachstellen
→ No new info (linked only)
Tier B
BSI Advisories172d ago
[NEU] [UNGEPATCHT] [kritisch] Adobe Acrobat Reader: Schwachstelle ermöglicht Erlangen von Administratorrechten
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.17.8 HIGH
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
25.001.2128824.001.30356
CWECWE-416
PublishedMar 10, 2026
Last enriched180d ago
Tags
remote code executionprivilege escalationinformation disclosurecritical
Trending Score0
Source articles3
Independent2
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-71362EXPKEV
Adobe Commerce | Incorrect Authorization (CWE-863)
Trending: 89
CRITICALCVE-2026-75745
Adobe Experience Manager Forms JEE | Incorrect Authorization (CWE-863)
Trending: 31
CRITICALCVE-2026-82000
Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)
Trending: 25
CRITICALCVE-2026-75698
Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
Trending: 25
CRITICALCVE-2026-75682
Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
Trending: 25

Pin to Dashboard

Verification

State: verified
Confidence: 100%

Vulnerability Timeline

CVE Published
Mar 10, 2026
Discovered by ZDM
Apr 1, 2026
Patch Available
Aug 27, 2026