CVE-2026-100132
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
Risk Assessment
Memory disclosure may provide an attacker with information useful for further attacks, including session data or configuration. The risk requires user action, limiting automation of the attack.
Recommendation
Update Acrobat for Edge to the latest patched version. Train users to avoid clicking unknown links and visiting suspicious sites.
Other vulnerabilities in Acrobat for Edge
Original NVD description (English source)
Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

