PatchSiren cyber security CVE debrief
CVE-2026-47919 Adobe CVE debrief
CVE-2026-47919 is a Use After Free vulnerability affecting Adobe Acrobat Reader versions 24.001.30365, 26.001.21651, and earlier. This vulnerability could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, as a victim must open a malicious file.
- Vendor
- Adobe
- Product
- Acrobat Reader
- CVSS
- HIGH 7.8
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-09
- Original CVE updated
- 2026-06-12
- Advisory published
- 2026-06-09
- Advisory updated
- 2026-06-12
Who should care
Users of Adobe Acrobat Reader versions 24.001.30365, 26.001.21651, and earlier should apply patches or mitigations to prevent exploitation of this vulnerability.
Technical summary
The vulnerability has a CVSS score of 7.8 and is classified as HIGH severity. The CVSS vector is CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The weakness is categorized as CWE-416.
Defensive priority
high
Recommended defensive actions
- Apply patches or updates provided by Adobe to vulnerable versions of Acrobat Reader.
- Restrict user access to untrusted files and sources.
- Implement security measures to prevent or detect malicious file openings.
Evidence notes
Evidence from the NVD and Adobe's security bulletin (see [ref-4](https://helpx.adobe.com/security/products/acrobat/apsb26-63.html)) confirms the vulnerability and provides details on affected versions and patches.
Official resources
-
CVE-2026-47919 CVE record
CVE.org
-
CVE-2026-47919 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Vendor Advisory
CVE-2026-47919 was published on [cvePublishedAt] and modified on [cveModifiedAt].