Vulnerabilities
Adobe Acrobat Reader DC Annotation Use-After-Free RCE Vulnerability (CVE-2026-81976)
A use‑after‑free flaw in Adobe Acrobat Reader DC’s annotation handling allows remote attackers to execute arbitrary code when a user opens a crafted PDF or visits a malicious web page. The vulnerability, CVE‑2026‑81976, carries a CVSS score of 7.8 and requires user interaction. Defenders should patch to the latest Reader version and monitor for suspicious PDF activity.
What happened
Adobe identified a use‑after‑free bug in the annotation subsystem of Acrobat Reader DC. The flaw occurs when the software accesses an annotation object that has already been freed, allowing an attacker to inject and execute code in the context of the Reader process.
Impact
The vulnerability (CVE‑2026‑81976) has a CVSS score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Exploitation requires user interaction—opening a malicious PDF or visiting a compromised web page. Successful exploitation results in remote code execution with the privileges of the current user.
Mitigation
- Update Adobe Acrobat Reader DC to the latest version (see Adobe security advisory APSB26‑141).
- Disable JavaScript in Reader if not needed, as the flaw can be triggered via embedded scripts.
- Implement PDF sandboxing or restrict file types in web browsers to limit exposure.
- Monitor for anomalous PDF opening events and block suspicious files.
Adobe Security Advisory: https://helpx.adobe.com/security/products/acrobat/apsb26-141.html
Related vulnerabilities
Adobe Acrobat Reader DC Annotation Use-After-Free RCE Vulnerability (CVE-2026-81986)
Adobe has disclosed a use‑after‑free flaw in Acrobat Reader DC that allows remote attackers to execute code when a user opens a malicious PDF or visits a crafted web page. The vulnerability, CVE‑2026‑81986, carries a CVSS score of 7.8 and requires user interaction. Defenders should verify patch status and update to the latest Reader version.
Read briefing
Adobe Acrobat Reader DC Font Parsing Use‑After‑Free Information Disclosure (CVE‑2026‑80162)
A use‑after‑free flaw in Adobe Acrobat Reader DC’s embedded‑font parsing can leak sensitive data when a user opens a crafted PDF or visits a malicious web page. The CVSS score is 3.3 and requires user interaction. Adobe has released a patch; defenders should verify installations and apply the update immediately.
Read briefing
Microsoft Remote Desktop Client RCE via Use‑After‑Free (CVE‑2026‑108458)
A use‑after‑free flaw in Windows Remote Desktop Client allows an unauthenticated network attacker to execute arbitrary code. The vulnerability affects all versions of the client that ship with Windows 10/11 and Windows Server 2019/2022. Apply the latest Microsoft security update and enforce RDP restrictions immediately.
Read briefing
CVE-2026-70274: Windows Bind Filter Driver Local Privilege Escalation
A use‑after‑free flaw in the Windows Bind Filter Driver allows an authenticated local user to elevate privileges. Microsoft has released a patch; defenders should apply it immediately and verify driver integrity.
Read briefing