Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

The version of Adobe Reader installed on the remote macOS host is a version prior to 26.001.21662. It is, therefore, affected by multiple vulnerabilities.

  - Stack-based Buffer Overflow (CWE-121) potentially leading to Arbitrary code execution (CVE-2026-47959)

  - Out-of-bounds Write (CWE-787) potentially leading to Arbitrary code execution (CVE-2026-47911)

  - Use After Free (CWE-416) potentially leading to Arbitrary code execution (CVE-2026-47912, CVE-2026-47913,     CVE-2026-47914, CVE-2026-47915, CVE-2026-47916, CVE-2026-47917, CVE-2026-47918, CVE-2026-47919,     CVE-2026-47920, CVE-2026-47921, CVE-2026-47955)

  - Heap-based Buffer Overflow (CWE-122) potentially leading to Arbitrary code execution (CVE-2026-47952)

  - Uncontrolled Search Path Element (CWE-427) potentially leading to Arbitrary code execution     (CVE-2026-47937)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 24.001.30383 or 26.001.21662. It is, therefore, affected by multiple vulnerabilities.

  - Stack-based Buffer Overflow (CWE-121) potentially leading to Arbitrary code execution (CVE-2026-47959)

  - Out-of-bounds Write (CWE-787) potentially leading to Arbitrary code execution (CVE-2026-47911)

  - Use After Free (CWE-416) potentially leading to Arbitrary code execution (CVE-2026-47912, CVE-2026-47913,     CVE-2026-47914, CVE-2026-47915, CVE-2026-47916, CVE-2026-47917, CVE-2026-47918, CVE-2026-47919,     CVE-2026-47920, CVE-2026-47921, CVE-2026-47955)

  - Heap-based Buffer Overflow (CWE-122) potentially leading to Arbitrary code execution (CVE-2026-47952)

  - Uncontrolled Search Path Element (CWE-427) potentially leading to Arbitrary code execution     (CVE-2026-47937)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote Windows host is a version prior to 26.001.21662. It is, therefore, affected by multiple vulnerabilities.

  - Stack-based Buffer Overflow (CWE-121) potentially leading to Arbitrary code execution (CVE-2026-47959)

  - Out-of-bounds Write (CWE-787) potentially leading to Arbitrary code execution (CVE-2026-47911)

  - Use After Free (CWE-416) potentially leading to Arbitrary code execution (CVE-2026-47912, CVE-2026-47913,     CVE-2026-47914, CVE-2026-47915, CVE-2026-47916, CVE-2026-47917, CVE-2026-47918, CVE-2026-47919,     CVE-2026-47920, CVE-2026-47921, CVE-2026-47955)

  - Heap-based Buffer Overflow (CWE-122) potentially leading to Arbitrary code execution (CVE-2026-47952)

  - Uncontrolled Search Path Element (CWE-427) potentially leading to Arbitrary code execution     (CVE-2026-47937)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 24.001.30383 or 26.001.21662. It is, therefore, affected by multiple vulnerabilities.

  - Stack-based Buffer Overflow (CWE-121) potentially leading to Arbitrary code execution (CVE-2026-47959)

  - Out-of-bounds Write (CWE-787) potentially leading to Arbitrary code execution (CVE-2026-47911)

  - Use After Free (CWE-416) potentially leading to Arbitrary code execution (CVE-2026-47912, CVE-2026-47913,     CVE-2026-47914, CVE-2026-47915, CVE-2026-47916, CVE-2026-47917, CVE-2026-47918, CVE-2026-47919,     CVE-2026-47920, CVE-2026-47921, CVE-2026-47955)

  - Heap-based Buffer Overflow (CWE-122) potentially leading to Arbitrary code execution (CVE-2026-47952)

  - Uncontrolled Search Path Element (CWE-427) potentially leading to Arbitrary code execution     (CVE-2026-47937)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
320128	Adobe Reader < 26.001.21662 Multiple Vulnerabilities (APSB26-63) (macOS)	Nessus	MacOS X Local Security Checks	high
320127	Adobe Acrobat < 24.001.30383 / 26.001.21662 Multiple Vulnerabilities (APSB26-63)	Nessus	Windows	high
320126	Adobe Reader < 26.001.21662 Multiple Vulnerabilities (APSB26-63)	Nessus	Windows	high
320125	Adobe Acrobat < 24.001.30383 / 26.001.21662 Multiple Vulnerabilities (APSB26-63) (macOS)	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2026-47925

medium

Tenable Plugins

high

high

high

high