CVE-2026-81993
Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.5
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CWE
- CWE-122
- Published
- 2026-09-08
- Last modified
- 2026-09-09
Affected products
- Adobe Adobe Acrobat
- Adobe Adobe Acrobat
- Adobe Acrobat Reader
- Adobe Acrobat Reader
- Adobe Acrobat 2024
- Adobe Acrobat 2024
Weakness type
Related vulnerabilities
- CVE-2026-85103 — Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding
- CVE-2026-87430 — Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...
- CVE-2026-87579 — Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...
- CVE-2026-87654 — Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote...
- CVE-2026-87527 — Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...
- CVE-2026-53938 — OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)
- CVE-2026-81992 — Acrobat Reader | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-82006 — Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)