CVE Watch—

CVE-2026-34621

Adobe Acrobat and Reader Prototype Pollution Vulnerability

CVSS

—

No CVSS

EPSS

7.1%

p94

KEV

YES

Apr 13, 2026

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

7.1%EPSS · 30 days7.1%

2026-06-302026-07-16

KEV catalog record

Product

Adobe / Acrobat and Reader

Vulnerability

Adobe Acrobat and Reader Prototype Pollution Vulnerability

Added to KEV

Apr 13, 2026

Remediate by

Apr 27, 2026

Known ransomware use

Summary description

Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://helpx.adobe.com/security/products/acrobat/apsb26-43.html ; https://nvd.nist.gov/vuln/detail/CVE-2026-34621

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2008-2992—

99.9%

KEV—80Adobe Reader and Acrobat Input Validation Vulnerability—CVE-2007-5659—

99.8%

KEV—80Adobe Acrobat and Reader Buffer Overflow Vulnerability—CVE-2009-3459—

99.7%

KEV—80Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability—CVE-2021-21017—

99.7%

KEV—80Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability—CVE-2009-3953—

99.7%

KEV—80Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability—CVE-2010-2883—

99.6%

KEV—80Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability—