CVE-2026-81996

EUVD-2026-74200
Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access. Exploitation of this issue does not require user interaction. Scope is changed.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 14.05%
Affected Products (NVD)
VendorProductVersion
adobeacrobat
24.0.0 ≤
𝑥
< 24.001.30429
adobeacrobat_dc
15.008.20082 ≤
𝑥
< 26.002.21901
adobeacrobat_reader_dc
15.008.20082 ≤
𝑥
< 26.002.21901
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://helpx.adobe.com/security/products/acrobat/apsb26-141.html