ZDI-26-672: Adobe Acrobat Reader DC PDF File Parsing Integer Underflow Information Disclosure Vulnerability
ZDI disclosed CVE-2026-81977, an integer underflow in Adobe Acrobat Reader DC PDF parsing that enables sensitive information disclosure.
Zero Day Initiative advisory ZDI-26-672 reports an integer underflow in PDF file parsing in Adobe Acrobat Reader DC. A remote attacker could disclose sensitive information, but exploitation requires the victim to open a malicious file or visit a malicious page. The flaw carries a low CVSS score of 3.3. No exploitation is reported.
- CVE-2026-81977 assigned; CVSS 3.3
- Integer underflow causes information disclosure in PDF parsing
- User interaction required; low-severity issue
- CVEs
- CVE-2026-81977
- Vendors
- AdobeZero Day Initiative
- Products
- Adobe Acrobat Reader DC
- Organizations
- Zero Day Initiative
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-81977 | Integer Underflow Information Disclosure in Adobe Acrobat Reader | 5.5 | <1% |
From the original article
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.