Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to spoof the identity of a signer. Exploitation of this issue requires user interaction.

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 24.001.30356 or 25.001.21288. It is, therefore, affected by multiple vulnerabilities.

  - Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by a Use After     Free vulnerability that could result in arbitrary code execution in the context of the current user.
    Exploitation of this issue requires user interaction in that a victim must open a malicious file.
    (CVE-2026-27220, CVE-2026-27278)

  - Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by an Improper     Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could     leverage this vulnerability to spoof the identity of a signer. Exploitation of this issue requires user     interaction. (CVE-2026-27221)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote macOS host is a version prior to 25.001.21288. It is, therefore, affected by multiple vulnerabilities.

  - Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by a Use After     Free vulnerability that could result in arbitrary code execution in the context of the current user.
    Exploitation of this issue requires user interaction in that a victim must open a malicious file.
    (CVE-2026-27220, CVE-2026-27278)

  - Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by an Improper     Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could     leverage this vulnerability to spoof the identity of a signer. Exploitation of this issue requires user     interaction. (CVE-2026-27221)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 24.001.30356 or 25.001.21288. It is, therefore, affected by multiple vulnerabilities.

  - Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by a Use After     Free vulnerability that could result in arbitrary code execution in the context of the current user.
    Exploitation of this issue requires user interaction in that a victim must open a malicious file.
    (CVE-2026-27220, CVE-2026-27278)

  - Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by an Improper     Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could     leverage this vulnerability to spoof the identity of a signer. Exploitation of this issue requires user     interaction. (CVE-2026-27221)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote Windows host is a version prior to 25.001.21288. It is, therefore, affected by multiple vulnerabilities.

  - Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by a Use After     Free vulnerability that could result in arbitrary code execution in the context of the current user.
    Exploitation of this issue requires user interaction in that a victim must open a malicious file.
    (CVE-2026-27220, CVE-2026-27278)

  - Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by an Improper     Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could     leverage this vulnerability to spoof the identity of a signer. Exploitation of this issue requires user     interaction. (CVE-2026-27221)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
301712	Adobe Acrobat < 24.001.30356 / 25.001.21288 Multiple Vulnerabilities (APSB26-26) (macOS)	Nessus	MacOS X Local Security Checks	high
301711	Adobe Reader < 25.001.21288 Multiple Vulnerabilities (APSB26-26) (macOS)	Nessus	MacOS X Local Security Checks	high
301710	Adobe Acrobat < 24.001.30356 / 25.001.21288 Multiple Vulnerabilities (APSB26-26)	Nessus	Windows	high
301709	Adobe Reader < 25.001.21288 Multiple Vulnerabilities (APSB26-26)	Nessus	Windows	high

Detections

Analytics

CVE-2026-27221

medium

Tenable Plugins

high

high

high

high