Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 24.001.30429 or 26.002.21901. It is, therefore, affected by multiple vulnerabilities.

  - Heap-based Buffer Overflow (CWE-122) potentially leading to Arbitrary code execution (CVE-2026-81992)

  - Incorrect Authorization (CWE-863) potentially leading to Privilege escalation (CVE-2026-81996)

  - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)     potentially leading to Arbitrary file system read (CVE-2026-81994)

  - Out-of-bounds Write (CWE-787) potentially leading to Arbitrary code execution (CVE-2026-79908,     CVE-2026-81979, CVE-2026-81980, CVE-2026-81981, CVE-2026-81983)

  - Double Free (CWE-415) potentially leading to Arbitrary code execution (CVE-2026-79907)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 24.001.30429 or 26.002.21901. It is, therefore, affected by multiple vulnerabilities.

  - Heap-based Buffer Overflow (CWE-122) potentially leading to Arbitrary code execution (CVE-2026-81992)

  - Incorrect Authorization (CWE-863) potentially leading to Privilege escalation (CVE-2026-81996)

  - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)     potentially leading to Arbitrary file system read (CVE-2026-81994)

  - Out-of-bounds Write (CWE-787) potentially leading to Arbitrary code execution (CVE-2026-79908,     CVE-2026-81979, CVE-2026-81980, CVE-2026-81981, CVE-2026-81983)

  - Double Free (CWE-415) potentially leading to Arbitrary code execution (CVE-2026-79907)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote macOS host is a version prior to 26.002.21901. It is, therefore, affected by multiple vulnerabilities.

  - Heap-based Buffer Overflow (CWE-122) potentially leading to Arbitrary code execution (CVE-2026-81992)

  - Incorrect Authorization (CWE-863) potentially leading to Privilege escalation (CVE-2026-81996)

  - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)     potentially leading to Arbitrary file system read (CVE-2026-81994)

  - Out-of-bounds Write (CWE-787) potentially leading to Arbitrary code execution (CVE-2026-79908,     CVE-2026-81979, CVE-2026-81980, CVE-2026-81981, CVE-2026-81983)

  - Double Free (CWE-415) potentially leading to Arbitrary code execution (CVE-2026-79907)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote Windows host is a version prior to 26.002.21901. It is, therefore, affected by multiple vulnerabilities.

  - Heap-based Buffer Overflow (CWE-122) potentially leading to Arbitrary code execution (CVE-2026-81992)

  - Incorrect Authorization (CWE-863) potentially leading to Privilege escalation (CVE-2026-81996)

  - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)     potentially leading to Arbitrary file system read (CVE-2026-81994)

  - Out-of-bounds Write (CWE-787) potentially leading to Arbitrary code execution (CVE-2026-79908,     CVE-2026-81979, CVE-2026-81980, CVE-2026-81981, CVE-2026-81983)

  - Double Free (CWE-415) potentially leading to Arbitrary code execution (CVE-2026-79907)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
343844	Adobe Acrobat < 24.001.30429 / 26.002.21901 Multiple Vulnerabilities (APSB26-141) (macOS)	Nessus	MacOS X Local Security Checks	Local	high
343843	Adobe Acrobat < 24.001.30429 / 26.002.21901 Multiple Vulnerabilities (APSB26-141)	Nessus	Windows	Local	high
343842	Adobe Reader < 26.002.21901 Multiple Vulnerabilities (APSB26-141) (macOS)	Nessus	MacOS X Local Security Checks	Local	high
343841	Adobe Reader < 26.002.21901 Multiple Vulnerabilities (APSB26-141)	Nessus	Windows	Local	high

Detections

Analytics

CVE-2026-81982

medium

Tenable Plugins

high

high

high

high