← CVE Intelligence

CVE-2026-34621

Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321) PUBLISHED

Description (CNA)

Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (CNA)

Vendor / productVersions
Adobe / Acrobat DCaffected 0 through 26.001.21367; unaffected 26.001.21411
Adobe / Acrobat Reader DCaffected 0 through 26.001.21367; unaffected 26.001.21411
Adobe / Acrobat 2024affected 0 through 24.001.30356; unaffected 24.001.30362 (Win), 24.001.30360 (Mac)

CWE

CWE-1321

References

ADP enrichment

CISA-ADP

No English description supplied.