PT-2026-32704 · Adobe · Acrobat Reader

Published 2026-04-14 · Updated 2026-04-29 · CVE-2026-34622

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions prior to 26.001.21412

Description An Improperly Controlled Modification of Object Prototype Attributes, also known as Prototype Pollution, allows for arbitrary code execution in the context of the current user. This occurs when a victim opens a malicious file, requiring user interaction to trigger the execution.

Recommendations Update to a version newer than 26.001.21411.

Fix

RCE

Prototype Pollution

Weakness Enumeration

CWE-1321

Related Identifiers

BDU:2026-05391

CVE-2026-34622

Affected Products

Acrobat Reader

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2026-34622 · Security Note
• https://helpx.adobe.com/security/products/acrobat/apsb26-44.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05391 · Security Note
• https://twitter.com/greenapple_w/status/2044136479283392862 · Twitter Post
• https://dbugs.ptsecurity.com/vulnerability/PT-2026-32704?fts%5Bvalue%5D=cve-2026-34622 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34622 · Note
• https://twitter.com/CVEnew/status/2045889755125055757 · Twitter Post
• https://twitter.com/RedHornet_Intel/status/2044093602276487483 · Twitter Post
• https://twitter.com/HaifeiLi/status/2044176791267619062 · Twitter Post
• https://twitter.com/ptdbugs/status/2044120993510117776 · Twitter Post
• https://reddit.com/r/SecOpsDaily/comments/1sz4wza/three_bugs_walk_into_a_pdf_prototype_pollution · Reddit Post