PT-2026-24469 · Adobe · Acrobat Reader

Jann Horn · CVE-2026-27221 · Publicado 2026-03-10 · Atualizado 2026-03-10

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 24.001.30307 through 25.001.21265

Description Acrobat Reader is affected by an Improper Certificate Validation issue that may allow an attacker to bypass security features and spoof the identity of a signer. User interaction is required for successful exploitation.

Recommendations Update Acrobat Reader to a version later than 25.001.21265. Update Acrobat Reader to a version later than 24.001.30308. Update Acrobat Reader to a version later than 24.001.30307.

Correção

Improper Certificate Validation

Improper Verification of Cryptographic Signature

Enumeração de Fraquezas

CWE-295

CWE-347

Identificadores relacionados

BDU:2026-03232

CVE-2026-27221

Produtos afetados

Acrobat Reader

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-27221 · Nota de Segurança
• https://helpx.adobe.com/security/products/acrobat/apsb26-26.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-03232 · Nota de Segurança
• https://twitter.com/CVEnew/status/2031504069164998775 · Publicação no Twitter
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27221 · Nota
• https://osv.dev/vulnerability/CVE-2026-27221 · Aviso do Fabricante