VYPR
← All advisories
High severity8.6CISA KEVNVD Advisory· Published Apr 11, 2026· Updated Apr 13, 2026

CVE-2026-34621

CVE-2026-34621

Description

Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Adobe Inc./Acrobat2 versions
    cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*+ 1 more
    • cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*range: >=24.0.0,<24.001.30362
    • cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*range: <26.001.21411
  • Adobe Inc./Acrobat Reader Dc
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
    Range: <26.001.21411
  • Foxitsoftware/Readerllm-fuzzy
    Range: <=26.001.21367

Patches

Vulnerability mechanics

References

2

News mentions

1