CVE-2026-81996: Adobe Acrobat

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access. Exploitation of this issue does not require user interaction. Scope is changed.

Affected products

• Adobe Acrobat: from 24.0.0, before 24.001.30429 (fixed in 24.001.30429)
• Adobe Acrobat DC: from 15.008.20082, before 26.002.21901 (fixed in 26.002.21901)
• Adobe Acrobat Reader DC: from 15.008.20082, before 26.002.21901 (fixed in 26.002.21901)

Published 2026-09-08. Last modified 2026-09-10.