Search: “Adobe Acrobat Pro DC”

ZDI-26-673: Adobe Acrobat Pro DC Doc Object Use-After-Free Remote Code Execution Vulnerability

ZDI disclosed CVE-2026-81988, a use-after-free in Adobe Acrobat Pro DC document object handling that enables remote code execution.

Zero Day Initiative advisory ZDI-26-673 describes a use-after-free vulnerability in the document object handling of Adobe Acrobat Pro DC. Arbitrary code execution is possible when a target opens a malicious file or visits a malicious page. The flaw received a CVSS rating of 7.8. No in-the-wild exploitation is reported.

ZDI Published Advisories·Sep 10, 05:00 UTC · 7d agoVulnerability 19 sourcesCVE-2026-81988

ZDI-26-663: Adobe Acrobat Pro DC Annotation Use-After-Free Remote Code Execution Vulnerability

ZDI disclosed CVE-2026-81989, a use-after-free remote code execution flaw in Adobe Acrobat Pro DC annotation handling rated CVSS 7.8.

The Zero Day Initiative published advisory ZDI-26-663 for a use-after-free vulnerability in Adobe Acrobat Pro DC's annotation processing. Successful exploitation allows remote attackers to execute arbitrary code on affected installations. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file. The flaw is rated CVSS 7.8 and is tracked as CVE-2026-81989.

ZDI Published Advisories·Sep 10, 05:00 UTC · 7d agoVulnerability 19 sourcesCVE-2026-81989

Adobe fixes critical flaws in Magento, patch it immediately

Security Affairs·Aug 11, 08:07 UTC · Aug 11, 2021VulnerabilityCVE-2020-9697CVE-2020-9712

Adobe releases more security updates, equips Adobe Acrobat DC with a sandbox

Help Net Security·Nov 14, 09:23 UTC · Nov 14, 2023Vulnerability in the wild