AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AdobeCVE-2026-81997

Adobe Acrobat 2024: improper authorization

Adobe

CVE-2026-81997 · Published Sep 8, 2026 · updated Sep 10, 2026

Medium6.3
No fix yet
Adobe advisory

Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Affected versions

PackageAffectedFixed in
Acrobat 2024
Product
<= 24.001.30383No fix yet
Acrobat Reader
Product
<= 26.002.21900No fix yet
Adobe Acrobat
Product
<= 26.002.21900No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-863

More Adobe advisories

All Adobe