CVE-2026-47924
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information.
Risk Assessment
Disclosure of sensitive information could lead to serious privacy and data security breaches within the organization. Exploitation requires user interaction, increasing the risk when opening malicious files.
Recommendation
It is recommended to update Acrobat Reader to the latest version to mitigate the risk associated with this vulnerability. Users should also be educated about opening files from unknown sources.
Original NVD description (English source)
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.