Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-81997

Acrobat Reader | Incorrect Authorization (CWE-863)

Description

Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Adobe Acrobat

Default version status: unaffected

  • 0 to ≤ 26.002.21900affected
  • 26.002.21901unaffected

Adobe Acrobat Reader

Default version status: unaffected

  • 0 to ≤ 26.002.21900affected
  • 26.002.21901unaffected

Adobe Acrobat 2024

Default version status: unaffected

  • 0 to ≤ 24.001.30383affected
  • 24.001.30429unaffected

References