PatchSiren cyber security CVE debrief
CVE-2026-47917 Adobe CVE debrief
CVE-2026-47917 is a HIGH severity Use After Free vulnerability affecting Adobe Acrobat Reader versions 24.001.30365, 26.001.21651, and earlier. The vulnerability could result in arbitrary code execution in the context of the current user, requiring user interaction to open a malicious file. The CVSS score for this vulnerability is 7.8.
- Vendor
- Adobe
- Product
- Acrobat Reader
- CVSS
- HIGH 7.8
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-09
- Original CVE updated
- 2026-06-12
- Advisory published
- 2026-06-09
- Advisory updated
- 2026-06-12
Who should care
Users of Adobe Acrobat Reader versions 24.001.30365, 26.001.21651, and earlier should apply the necessary updates to mitigate this vulnerability.
Technical summary
The vulnerability is caused by a Use After Free issue in Adobe Acrobat Reader. This type of vulnerability occurs when the software attempts to use memory after it has been freed, which can lead to arbitrary code execution.
Defensive priority
HIGH
Recommended defensive actions
- Apply the updates provided by Adobe to vulnerable versions of Acrobat Reader.
- Ensure that users do not open malicious files.
Evidence notes
The CVE-2026-47917 vulnerability was published on [cvePublishedAt] and modified on [cveModifiedAt]. The vulnerability affects Adobe Acrobat Reader versions 24.001.30365, 26.001.21651, and earlier.
Official resources
-
CVE-2026-47917 CVE record
CVE.org
-
CVE-2026-47917 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Vendor Advisory
CVE-2026-47917 was published on 2026-06-09T21:17:21.590Z and modified on 2026-06-12T19:20:17.910Z.