CVE-2026-47925

Acrobat Reader | Integer Overflow or Wraparound (CWE-190)

At a glance

Severity
MEDIUM 5.5
EPSS
EPSS 0.17 % · percentile 6 (2026-10-27)
State
PUBLISHED
Published
Updated
Assigner
adobe
NVD status
Analyzed

Description

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hadobe
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HNVD · psirt@adobe.com (Secondary)

Weaknesses (CWE)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Adobe · Acrobat DCaffected 0 ≤ 26.001.21651 ; unaffected 26.001.21662
Adobe · Acrobat Reader DCaffected 0 ≤ 26.001.21651 ; unaffected 26.001.21662
Adobe · Acrobat 2024affected 0 ≤ 24.001.30365 ; unaffected 24.001.30383

References

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD