Critical Adobe Acrobat Flaw Lets Malicious PDFs Trigger One-Click Memory Corruption
Adobe patched Acrobat CVE-2026-81983, a PDF memory-corruption flaw with no known exploitation.
Adobe patched CVE-2026-81983, an out-of-bounds write in Acrobat and Acrobat Reader’s image parser with a CVSS score of 7.8. Opening a malicious PDF can corrupt memory through a 32-bit integer overflow in Acrobat.dll and may allow code execution with the user’s rights; the attack requires the victim to open the file. Researchers demonstrated the crash with a 745-byte PDF containing a crafted 16-bit image. Adobe fixed the calculation with 64-bit math in bulletin APSB26-141 and says it has seen no active exploitation.
- CVE-2026-81983 is an out-of-bounds write in Acrobat’s image pipeline, CVSS 7.8.
- A crafted PDF can corrupt memory when opened and may execute code as the user.
- Adobe fixed it in APSB26-141 on September 8, 2026, and reports no active exploitation.
- The bug is a 32-bit integer overflow in Acrobat.dll found with AI-assisted fuzzing.
- CVEs
- CVE-2026-81983
- Vendors
- Adobe
- Products
- Adobe AcrobatAcrobat Reader
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-81983 | Out-of-Bounds Write in Adobe Acrobat Reader Enables Arbitrary Code Execution | 7.8 | <1% |
From the original article
2 min read at cybersecuritynews.com
Adobe has fixed a flaw in Acrobat and Acrobat Reader that lets a malicious PDF corrupt memory when a user opens it. Tracked as CVE-2026-81983, the out-of-bounds write carries a CVSS score of 7. 8 and could lead to code execution with the victim’s user rights.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.