ZDI-26-670: Adobe Acrobat Pro DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability
ZDI published advisory ZDI-26-670 for an out-of-bounds read information disclosure flaw (CVE-2026-81991) in Adobe Acrobat Pro DC.
The Zero Day Initiative disclosed ZDI-26-670, an out-of-bounds read in the Doc object of Adobe Acrobat Pro DC. A remote attacker could disclose sensitive information from affected installations if the user opens a malicious file or page. ZDI rated the issue 3.3 on the CVSS scale and assigned CVE-2026-81991.
- Out-of-bounds read in the Doc object leaks sensitive information from Acrobat Pro DC
- Exploitation requires user interaction with a malicious file or page
- ZDI assigned CVSS 3.3 and CVE-2026-81991
- CVEs
- CVE-2026-81991
- Vendors
- AdobeZero Day Initiative
- Products
- Adobe Acrobat Pro DC
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-81991 | Out-of-Bounds Read Information Disclosure in Adobe Acrobat Reader (Doc Object) | 5.5 | <1% |
From the original article
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.