Loading story…
CVE-2026-81983 is a high-severity vulnerability in Adobe Acrobat and Acrobat Reader on Windows and macOS that can allow arbitrary code execution with the current user’s privileges when a victim opens a malicious PDF. CSIRT Panamá describes the flaw as an out-of-bounds write with a CVSS 3.1 score of 7.8. According to its advisory, Adobe patched the vulnerability on September 8 through bulletin APSB26-141 and reported no known exploitation.
A report shared on Reddit’s r/netsec claims researchers discovered the flaw through a week of AI-driven fuzzing, describing an integer overflow that causes memory corruption. Although the post calls it a “critical zero-day,” the advisory classifies it as high severity and identifies an available patch; the research excerpt provides no evidence of exploitation in the wild. Organizations should install Adobe’s corrected versions, retain Protected Mode and Protected View, strengthen filtering of PDF attachments, and investigate suspicious PDF activity on unpatched endpoints.
See affected versions and whether adversaries are exploiting it.
4 events from the most recent confirmed update back to the earliest known activity.
CSIRT Panamá issued an advisory classifying the flaw as a high-severity out-of-bounds write with a CVSS 3.1 score of 7.8, potentially allowing arbitrary code execution on Windows and macOS. It urged users to update Acrobat and Reader and stated that Adobe had no knowledge of exploitation.
Reddit user u/NewResearch1337 shared the remedio.io research report in r/netsec, publicly disclosing details of the vulnerability. CSIRT Panamá identified this disclosure as increasing risk to unpatched devices.
According to CSIRT Panamá, Adobe corrected the vulnerability through security bulletin APSB26-141, which addressed 31 additional vulnerabilities. Fixed releases include Acrobat and Reader DC Continuous 26.002.21901 and Acrobat 2024 Classic 24.001.30429.
A remedio.io report claims that a week of AI-driven fuzzing of Adobe Reader uncovered CVE-2026-81983. The report describes an integer overflow in Adobe Acrobat that causes memory corruption when a malicious PDF is opened.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
4 references tracked. Mallory keeps watching after this page renders.
cybersecuritynews.com
Open sourcecryptika.com
Open sourcereddit.com
Open sourcecert.pa
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Adobe security advisory **APSB24-70** provides updates for two arbitrary-code-execution vulnerabilities in Adobe Acrobat and Reader: **CVE-2024-41869**, a use-after-free flaw, and **CVE-2024-45112**, a type confusion flaw. Both can be exploited by persuading a victim to open a specially crafted PDF. Security bulletin SB20240910117 reports that CVE-2024-41869 has been actively exploited in the wild; it does not report active exploitation of CVE-2024-45112. The security bulletin assigns each vulnerability a **CVSS v4.0 score of 8.4** and rates the overall risk as Critical. Organizations should prioritize deploying the vendor updates referenced in APSB24-70 across affected Acrobat and Reader installations, given the reported exploitation and the ability to deliver attacks through malicious PDFs.
Oct 9, 2026
JPCERT/CC warned that multiple vulnerabilities in **Adobe Acrobat** and **Adobe Acrobat Reader** could lead to arbitrary code execution on both Windows and macOS, including flaws tracked in Adobe bulletins `APSB26-43` and `APSB26-44`. Adobe said exploitation of the `APSB26-43` issues has been confirmed, while JPCERT/CC noted it had not observed attacks in Japan at publication time and cautioned that broader abuse could follow as technical details spread. The affected products include **Adobe Acrobat DC Continuous**, **Adobe Acrobat Reader DC Continuous**, and **Adobe Acrobat 2024 Classic** up to the vulnerable versions identified by Adobe. JPCERT/CC urged organizations and users to update immediately to the latest patched releases, including `26.001.21431` for the DC Continuous branch and `24.001.30365` for Acrobat 2024 Classic, because opening maliciously crafted content may be enough to trigger remote code execution.
Jun 29, 2026
German authorities issued security advisories for **Adobe Acrobat DC**, **Acrobat Reader DC**, and **Adobe Acrobat Reader** covering multiple vulnerabilities that could allow **information disclosure** and **arbitrary code execution**. One advisory specifically warned that a flaw in Adobe Acrobat Reader could expose sensitive information and be leveraged for code execution, raising the risk of compromise when users open maliciously crafted PDF files. A follow-up advisory expanded the scope to **multiple vulnerabilities** across Adobe’s Acrobat product line, indicating broader exposure for enterprise and end-user systems that rely on Adobe PDF software. Organizations using affected Adobe applications should prioritize vendor patches and review endpoint protections, as successful exploitation could give attackers access to data or the ability to run code on targeted systems.
Jun 29, 2026