CVE-2026-34621

HIGHCVSS 8.6Known Exploited

CISA Known Exploited Vulnerability

https://helpx.adobe.com/security/products/acrobat/apsb26-43.html ; https://nvd.nist.gov/vuln/detail/CVE-2026-34621

Remediation deadline: April 27, 2026

Description

Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution.

Timeline

Published:April 11th, 2026 7:16 AM

Last modified:August 28th, 2026 12:17 AM

Added to KEV:April 13th, 2026

CVSS Scoring

CVSS v3: 8.6 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected Software

From NVD CPE configuration data

Vendors

adobe

Products

acrobat_dcacrobat_reader_dcacrobat

Weaknesses (CWE)

References & Reports

Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute