CVE-2026-47925
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could re
CVSS
5.5
Medium
EPSS
0.2%
p6
KEV
—
Exploit Today
2
0-100
Published: Jun 9, 2026 · Last modified: Jul 23, 2026 · CWE-190
0.1%EPSS · 30 days0.2%
2026-07-052026-08-01
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-654238.8 HIG45.6%
——14An integer overflow in the UA_Variant arrayDimensions product
computation in open62541 may allow a remote attacker to trigger an
out-of-bounds write.2dCVE-2026-635597.5 HIG35.7%
——11An integer overflow in the UA_Variant arrayDimensions product
computation in open62541 may allow a remote attacker to read
out-of-bounds heap memory, potentially disclosing sensitive information.2dCVE-2026-165297.5 HIG21.4%
——6A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service (DoS) for subsequent packet reads.3dCVE-2026-177269.6 CRI20.2%
——6Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)3dCVE-2026-177179.6 CRI31.5%
——9Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)3dCVE-2026-177058.8 HIG37.9%
——11Integer overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)3d