Loading story…
Adobe security advisory APSB24-70 provides updates for two arbitrary-code-execution vulnerabilities in Adobe Acrobat and Reader: CVE-2024-41869, a use-after-free flaw, and CVE-2024-45112, a type confusion flaw. Both can be exploited by persuading a victim to open a specially crafted PDF. Security bulletin SB20240910117 reports that CVE-2024-41869 has been actively exploited in the wild; it does not report active exploitation of CVE-2024-45112.
The security bulletin assigns each vulnerability a CVSS v4.0 score of 8.4 and rates the overall risk as Critical. Organizations should prioritize deploying the vendor updates referenced in APSB24-70 across affected Acrobat and Reader installations, given the reported exploitation and the ability to deliver attacks through malicious PDFs.
See which actors are running it and whether you're in range.
2 events from the most recent confirmed update back to the earliest known activity.
Security bulletin SB20240910117 was published covering CVE-2024-41869, a use-after-free flaw, and CVE-2024-45112, a type confusion flaw, each rated CVSS v4.0 8.4. It states that patches are available and directs users to vendor updates referenced in Adobe advisory APSB24-70.
Security bulletin SB20240910117 reports active exploitation of CVE-2024-41869 in the wild. The vulnerability allows arbitrary code execution when a victim opens a specially crafted PDF; the timing of the exploitation is not specified.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Correlate live exploitation activity against the software you actually run, and see where you're exposed.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
JPCERT/CC warned that multiple vulnerabilities in **Adobe Acrobat** and **Adobe Acrobat Reader** could lead to arbitrary code execution on both Windows and macOS, including flaws tracked in Adobe bulletins `APSB26-43` and `APSB26-44`. Adobe said exploitation of the `APSB26-43` issues has been confirmed, while JPCERT/CC noted it had not observed attacks in Japan at publication time and cautioned that broader abuse could follow as technical details spread. The affected products include **Adobe Acrobat DC Continuous**, **Adobe Acrobat Reader DC Continuous**, and **Adobe Acrobat 2024 Classic** up to the vulnerable versions identified by Adobe. JPCERT/CC urged organizations and users to update immediately to the latest patched releases, including `26.001.21431` for the DC Continuous branch and `24.001.30365` for Acrobat 2024 Classic, because opening maliciously crafted content may be enough to trigger remote code execution.
Jun 29, 2026
CVE-2026-81983 is a high-severity vulnerability in Adobe Acrobat and Acrobat Reader on Windows and macOS that can allow arbitrary code execution with the current user’s privileges when a victim opens a malicious PDF. CSIRT Panamá describes the flaw as an out-of-bounds write with a CVSS 3.1 score of **7.8**. According to its advisory, Adobe patched the vulnerability on September 8 through bulletin APSB26-141 and reported no known exploitation. A report shared on Reddit’s r/netsec claims researchers discovered the flaw through a week of AI-driven fuzzing, describing an integer overflow that causes memory corruption. Although the post calls it a “critical zero-day,” the advisory classifies it as high severity and identifies an available patch; the research excerpt provides no evidence of exploitation in the wild. Organizations should **install Adobe’s corrected versions**, retain Protected Mode and Protected View, strengthen filtering of PDF attachments, and investigate suspicious PDF activity on unpatched endpoints.
Oct 16, 2026
Adobe disclosed two high-severity prototype pollution vulnerabilities in **Acrobat Reader** tracked as `CVE-2026-34621` and `CVE-2026-34622`. Both flaws can lead to arbitrary code execution in the context of the current user if a victim opens a malicious file, making user interaction a required condition for exploitation. Adobe classified both issues under `CWE-1321` and assigned CVSS v3.1 vectors indicating high impact to confidentiality, integrity, and availability. `CVE-2026-34621` affects Acrobat Reader versions `24.001.30356`, `26.001.21367`, and earlier, while `CVE-2026-34622` affects versions `26.001.21411`, `24.001.30360`, `24.001.30362`, and earlier. The disclosures indicate the vulnerabilities were reported to Adobe's PSIRT and published with advisory references, signaling that organizations using Acrobat Reader should identify exposed versions and prioritize updates to reduce the risk of malicious document-based compromise.
Jun 29, 2026