Product:
Acrobat Reader
Summary
Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by a Prototype Pollution vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.6 | CVE-2026-34622 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious file that, when opened by the victim using an affected version of Acrobat Reader, triggers the Prototype Pollution. This allows the attacker to execute arbitrary code within the context of the user, potentially leading to unauthorized access or control over the user’s system.
Affected Products
- Acrobat Reader versions 26.001.21411 and earlier
- Acrobat Reader versions 24.001.30360 and earlier
- Acrobat Reader versions 24.001.30362 and earlier
Mitigation
Users are advised to update to the latest version of Acrobat Reader to mitigate this vulnerability. Additionally, exercising caution when opening files from untrusted sources can help prevent exploitation.