CVE-2026-80159

Published: Sep 8, 2026Modified: Sep 10, 2026

4.0

Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N

Exploitability: 0.3 / Impact: 3.6

Source: psirt@adobe.com (Secondary)

Description

Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (3)

Products: Adobe: Acrobat, Acrobat Dc, Acrobat Reader Dc

3 products

Configuration A

3 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Adobe Acrobat	24.001.20604 ≤ version < 24.001.30429
Adobe Acrobat Dc	15.008.20082 ≤ version < 26.002.21901
Adobe Acrobat Reader Dc	15.008.20082 ≤ version < 26.002.21901

Running on/with	Platform Versions
Apple Macos	All versions
Microsoft Windows	All versions

Related CWEs

CWE-426

Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (1)

https://helpx.adobe.com/security/products/acrobat/apsb26-141.html

Source: psirt@adobe.com

Vendor Advisory

Timeline

No history available yet.