CVE-2026-81994 — Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

Description (CNA)

Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Affected (CNA)

Vendor / product	Versions
Adobe / Adobe Acrobat	affected 0 through 26.002.21900; unaffected 26.002.21901
Adobe / Acrobat Reader	affected 0 through 26.002.21900; unaffected 26.002.21901
Adobe / Acrobat 2024	affected 0 through 24.001.30383; unaffected 24.001.30429

CWE

CWE-1321

References

https://helpx.adobe.com/security/products/acrobat/apsb26-141.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.