VYPR
← All advisories
Medium severity4.0NVD Advisory· Published Sep 8, 2026· Updated Sep 10, 2026

CVE-2026-80159

CVE-2026-80159

Description

Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

4
  • Adobe Inc./Acrobat2 versions
    cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*+ 1 more
    • cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*range: >=24.001.20604,<24.001.30429
    • cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*range: >=15.008.20082,<26.002.21901
  • Adobe Inc./Acrobat Reader Dc
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
    Range: >=15.008.20082,<26.002.21901
  • Adobe Inc./Acrobat and Readerllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.