Vulnerabilities
Adobe Acrobat Reader DC Annotation Use-After-Free RCE Vulnerability (CVE-2026-81986)
Adobe has disclosed a use‑after‑free flaw in Acrobat Reader DC that allows remote attackers to execute code when a user opens a malicious PDF or visits a crafted web page. The vulnerability, CVE‑2026‑81986, carries a CVSS score of 7.8 and requires user interaction. Defenders should verify patch status and update to the latest Reader version.
What happened
Adobe Acrobat Reader DC contains a use‑after‑free bug in the annotation parser that lets an attacker execute arbitrary code when a user opens a malicious PDF or visits a malicious web page.
Impact
The flaw (CVE‑2026‑81986) has a CVSS score of 7.8 and allows remote code execution in the context of the current process. User interaction is required.
What to do
Check the version of Acrobat Reader DC on all endpoints. Apply the latest update released by Adobe (see Adobe Security Bulletin APSB26‑141). If immediate patching is not possible, disable JavaScript in Reader or restrict PDF access through group policy.
Related vulnerabilities
Adobe Acrobat Reader DC Annotation Use-After-Free RCE Vulnerability (CVE-2026-81976)
A use‑after‑free flaw in Adobe Acrobat Reader DC’s annotation handling allows remote attackers to execute arbitrary code when a user opens a crafted PDF or visits a malicious web page. The vulnerability, CVE‑2026‑81976, carries a CVSS score of 7.8 and requires user interaction. Defenders should patch to the latest Reader version and monitor for suspicious PDF activity.
Read briefing
Adobe Acrobat Reader DC Font Parsing Use‑After‑Free Information Disclosure (CVE‑2026‑80162)
A use‑after‑free flaw in Adobe Acrobat Reader DC’s embedded‑font parsing can leak sensitive data when a user opens a crafted PDF or visits a malicious web page. The CVSS score is 3.3 and requires user interaction. Adobe has released a patch; defenders should verify installations and apply the update immediately.
Read briefing
Microsoft Remote Desktop Client RCE via Use‑After‑Free (CVE‑2026‑108458)
A use‑after‑free flaw in Windows Remote Desktop Client allows an unauthenticated network attacker to execute arbitrary code. The vulnerability affects all versions of the client that ship with Windows 10/11 and Windows Server 2019/2022. Apply the latest Microsoft security update and enforce RDP restrictions immediately.
Read briefing
CVE-2026-70274: Windows Bind Filter Driver Local Privilege Escalation
A use‑after‑free flaw in the Windows Bind Filter Driver allows an authenticated local user to elevate privileges. Microsoft has released a patch; defenders should apply it immediately and verify driver integrity.
Read briefing