VYPR
← All advisories
High severity7.4NVD Advisory· Published Jun 9, 2026· Updated Jun 12, 2026

CVE-2026-47937

CVE-2026-47937

Description

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Affected products

4
  • Adobe Inc./Acrobat2 versions
    cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*+ 1 more
    • cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*range: >=24.0.0,<24.001.30383
    • cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*range: >=15.008.20082,<26.001.21662
  • Adobe Inc./Acrobat Reader Dc2 versions
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*+ 1 more
    • cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*range: >=15.008.20082,<26.001.21662
    • (no CPE)range: <=26.001.21651

Patches

Vulnerability mechanics

References

1

News mentions

1