Adobe Patches Acrobat Reader 0-Day Under Attack

Adobe has swiftly issued a critical security patch to address a zero-day vulnerability in Acrobat Reader that is being actively exploited in the wild. Identified as CVE-2026-34621, this flaw allows attackers to execute arbitrary code on compromised systems by exploiting the Prototype Pollution weakness. The vulnerability, highlighted under CWE-1321, arises from improper control over object prototype attributes. Attackers can manipulate software logic by injecting malicious properties.

The vulnerability’s critical severity is underscored by its CVSS v3.1 vector, indicating a remote attack with minimal complexity without needing prior privileges. Users are tricked into opening a malicious PDF, triggering the exploit and severely affecting system integrity. Given Acrobat Reader’s widespread use, this poses significant risks to organizations. Adobe advises immediate application of the provided security patches.

Cybersecurity teams should also enhance email filters, conduct regular awareness trainings, and deploy endpoint detection tools for extra protection. For a detailed report, visit the full article below.

Adobe Patches Acrobat Reader 0-Day Vulnerability Exploited in the Wild