CVE-2026-34622

Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
References
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

16 Apr 2026, 14:14

Type Values Removed Values Added
First Time Microsoft
Adobe acrobat Reader Dc
Adobe
Microsoft windows
Apple macos
Apple
Adobe acrobat Dc
Adobe acrobat
References () https://helpx.adobe.com/security/products/acrobat/apsb26-44.html - () https://helpx.adobe.com/security/products/acrobat/apsb26-44.html - Vendor Advisory
CPE cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

14 Apr 2026, 17:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-04-14 17:16

Updated : 2026-04-16 14:14


NVD link : CVE-2026-34622

Mitre link : CVE-2026-34622

CVE.ORG link : CVE-2026-34622


JSON object : View

Products Affected

adobe

  • acrobat
  • acrobat_dc
  • acrobat_reader_dc

microsoft

  • windows

apple

  • macos
CWE
CWE-1321

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')