Skip to content
AdobeCVE-2026-80159

Adobe Acrobat 2024: untrusted search path

Medium4.0CVE-2026-80159 · Published Sep 8, 2026 · updated Sep 10, 2026

Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe advisory

Affected versions

PackageAffectedFixed in
Acrobat 2024
Product
<= 24.001.30383No fix yet
Acrobat Reader
Product
<= 26.002.21900No fix yet
Adobe Acrobat
Product
<= 26.002.21900No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-426

More Adobe advisories

All Adobe
Advisory
Adobe Acrobat 2024: heap buffer overflow
Medium5.5Sep 8
Adobe Acrobat 2024: prototype pollution
High8.2Sep 8
Adobe Acrobat 2024: improper authorization
High8.8Sep 8
Adobe Acrobat 2024: improper authorization
Medium6.3Sep 8
Adobe Acrobat 2024: resource exhaustion
Medium5.5Sep 8
Adobe Acrobat 2024: use after free
High7.8Sep 8

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.