AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AdobeCVE-2026-80159

Adobe Acrobat 2024: untrusted search path

Adobe

CVE-2026-80159 · Published Sep 8, 2026 · updated Sep 10, 2026

Medium4.0
No fix yet
Adobe advisory

Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected versions

PackageAffectedFixed in
Acrobat 2024
Product
<= 24.001.30383No fix yet
Acrobat Reader
Product
<= 26.002.21900No fix yet
Adobe Acrobat
Product
<= 26.002.21900No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-426

More Adobe advisories

All Adobe