Adobe Acrobat Reader Incorrect Authorization Privilege Escalation
CVE-2026-81996 Published on September 8, 2026
Acrobat Reader | Incorrect Authorization (CWE-863)
Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access. Exploitation of this issue does not require user interaction. Scope is changed.
Vulnerability Analysis
CVE-2026-81996 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
What is an AuthZ Vulnerability?
The software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
CVE-2026-81996 has been classified to as an AuthZ vulnerability or weakness.
Products Associated with CVE-2026-81996
stack.watch emails you whenever new vulnerabilities are published in Adobe Acrobat or Adobe Reader. Just hit a watch button to start following.
Affected Versions
Adobe Acrobat:- Before and including 26.002.21900 is affected.
- Version 26.002.21901 is unaffected.
- Before and including 26.002.21900 is affected.
- Version 26.002.21901 is unaffected.
- Before and including 24.001.30383 is affected.
- Version 24.001.30429 is unaffected.