PT-2026-32705 · Adobe · Acrobat Reader

Published 2026-04-14 · Updated 2026-04-14 · CVE-2026-34626

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions prior to 26.001.21412

Description An Improperly Controlled Modification of Object Prototype Attributes, also known as Prototype Pollution (a flaw where an attacker can manipulate the prototype of an object to inject properties), could result in arbitrary file system read in the context of the current user. Exploitation requires user interaction, specifically that a victim opens a malicious file.

Recommendations Update to a version newer than 26.001.21411.

Fix

Prototype Pollution

Weakness Enumeration

CWE-1321

Related Identifiers

CVE-2026-34626

Affected Products

Acrobat Reader

References · 5

• https://helpx.adobe.com/security/products/acrobat/apsb26-44.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34626 · Security Note
• https://twitter.com/HaifeiLi/status/2044176791267619062 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34626 · Note
• https://twitter.com/greenapple_w/status/2044136479283392862 · Twitter Post