PT-2026-48260 · Adobe · Acrobat Reader

Published 2026-06-09 · Updated 2026-06-09 · CVE-2026-47937

NVD

CVSS v3.1

7.4

High

Base vector

AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2026-47937

Affected Products

Acrobat Reader

References · 2

• https://helpx.adobe.com/security/products/acrobat/apsb26-63.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-47937 · Security Note