CVE-2026-81997

No fix known EPSS <1%CVSS 6.3

Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Published 2026-09-08 · CVE record · OSV

Products: Adobe Acrobat, adobe acrobat_reader, Adobe Acrobat 2024