Veille CVE
CVE-2026-34621
8.6 Élevée Exploitée activementCatalogue CISA KEV — Adobe Acrobat and Reader Prototype Pollution Vulnerability
Ajoutée le 13/04/2026 · Échéance de correction (agences US) : 27/04/2026
Action requise : Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Description
Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.6 Élevée | psirt@adobe.com | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H |
Faiblesses (CWE)
Références
- https://helpx.adobe.com/security/products/acrobat/apsb26-43.html Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34621 US Government Resource