Vulnerability Intelligence Report
Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
CVE-2026-81994
Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
No Active Exploit Signals
CVSS Base Score
8.2
HIGH
Exploitability:1.9
Impact Score:5.8
Temporal Score:8.2
EPSS Probability:0.30%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-1321 ↗Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Adobe | Adobe Acrobat | 0 <= 26.002.21900 (affected), 26.002.21901 (unaffected) |
| Adobe | Acrobat Reader | 0 <= 26.002.21900 (affected), 26.002.21901 (unaffected) |
| Adobe | Acrobat 2024 | 0 <= 24.001.30383 (affected), 24.001.30429 (unaffected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.304%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Adobe Systems Incorporated · Vendor · USA |
| Reserved | 2026-08-27T21:20:45 |
| Published | 2026-09-08T20:30:55 |
| Patch Date | 2026-09-08 |
| Last Updated | 2026-09-10T14:59:14 |
Community Chatter & Buzz