CVE-2026-27220

Successful exploitation can result in arbitrary code execution in the security context of the current user. This gives an attacker the ability to run attacker-controlled code, which can lead to compromise of the affected workstation, access to user-accessible data, installation of additional payloads, and further post-exploitation activity subject to the privileges of the logged-in user.

Until patches are fully deployed, reduce exposure by limiting the opening of untrusted PDF content and restricting user interaction with unsolicited documents or web content that may invoke Acrobat Reader. Apply enterprise controls such as attachment filtering, content detonation or sandboxing, least-privilege user configurations, and application isolation where available to reduce the likelihood and impact of exploitation.

Upgrade Adobe Acrobat Reader to a vendor-fixed release that addresses CVE-2026-27220. Adobe issued a security update for this vulnerability and published remediation guidance in security bulletin APSB26-26. Systems running affected versions should be updated to the latest patched version as soon as operationally feasible.