PT-2026-24469 · Adobe · Acrobat Reader

Jann Horn · Published 2026-03-10 · Updated 2026-03-10 · CVE-2026-27221

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 24.001.30307 through 25.001.21265

Description Acrobat Reader is affected by an Improper Certificate Validation issue that may allow an attacker to bypass security features and spoof the identity of a signer. User interaction is required for successful exploitation.

Recommendations Update Acrobat Reader to a version later than 25.001.21265. Update Acrobat Reader to a version later than 24.001.30308. Update Acrobat Reader to a version later than 24.001.30307.

Fix

Improper Certificate Validation

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-295

CWE-347

Related Identifiers

BDU:2026-03232

CVE-2026-27221

Affected Products

Acrobat Reader

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-27221 · Security Note
• https://helpx.adobe.com/security/products/acrobat/apsb26-26.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03232 · Security Note
• https://osv.dev/vulnerability/CVE-2026-27221 · Vendor Advisory
• https://twitter.com/CVEnew/status/2031504069164998775 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27221 · Note