CVE Catalog

CVE-2026-100132

MediumCVSS 4.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.44%

38th percentile - higher than 38% of all known CVEs

Summary

Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

Risk Assessment

Memory disclosure may provide an attacker with information useful for further attacks, including session data or configuration. The risk requires user action, limiting automation of the attack.

Recommendation

Update Acrobat for Edge to the latest patched version. Train users to avoid clicking unknown links and visiting suspicious sites.

Other vulnerabilities in Acrobat for Edge

Original NVD description (English source)

Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS