4

CVE-2026-80159

Acrobat Reader | Untrusted Search Path (CWE-426)

Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Acrobat SwEdition classic Version >= 24.001.20604 < 24.001.30429
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
Adobe ≫ Acrobat Dc SwEdition continuous Version >= 15.008.20082 < 26.002.21901
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
Adobe ≫ Acrobat Reader Dc SwEdition continuous Version >= 15.008.20082 < 26.002.21901
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.017
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Adobe 4 0.3 3.6
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N
CWE-426 Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

https://helpx.adobe.com/security/products/acrobat/apsb26-141.html
Vendor Advisory