Adobe Acrobat/Reader Security Update: Critical RCE Vulnerabilities (CVE-2026-47911, CVE-2026-47912, CVE-2026-47913, CVE-2026-47914, CVE-2026-47915, CVE-2026-47916, CVE-2026-47917, CVE-2026-47918, CVE-2026-47919, CVE-2026-47920)

Vulnerability Overview Adobe has released a security update for the Windows and macOS versions of Adobe Acrobat and Reader. This update addresses multiple critical vulnerabilities, the successful exploitation of which could lead to arbitrary code execution, application denial of service, and memory exposure. Adobe is not aware of any reports of exploitation of these issues in the wild at this time. Affected Versions Products: Adobe Acrobat, Acrobat Reader, Acrobat 2024 Versions: - Adobe Acrobat: 26.001.21651 and earlier versions - Acrobat Reader: 26.001.21651 and earlier versions - Acrobat 2024: 24.001.30365 and earlier versions Platforms: Windows & macOS Resolution Adobe recommends that users update the software to the latest version. Specific methods are as follows: 1. Manual Update: Users can choose "Help > Check for Updates" to manually update the product. 2. Automatic Update: The product will automatically update when an update is detected, without requiring user intervention. 3. Download Center: The full Acrobat Reader installer can be downloaded from the Acrobat Reader Download Center. For IT Administrators (Managed Environments): Refer to the specific release links to obtain installers. Install updates using your preferred method, such as AIP-GPO, bootstrapper, SCUP/SCCM (Windows), or using Apple Remote Desktop and SSH on macOS. Vulnerability Details Credits Adobe thanks the following researchers for reporting these issues and collaborating with Adobe to protect customers: Seiji Sakurai (@HeapSmasher) with TrendAI Zero Day Initiative - CVE-2026-47911 Mark Vincent Yason (markyison.github.io) with TrendAI Zero Day Initiative - CVE-2026-47912, CVE-2026-47913, CVE-2026-47923, CVE-2026-47924 Brandon Evans with TrendAI Zero Day Initiative - CVE-2026-47915 Tao Yan (@BGalos) and Edouard Bochkin (@ile_douds) with Palo Alto Networks - CVE-2026-47916 Dongeui Ko (d0c70r) - CVE-2026-47925 Yu Zhou and Yutao Wang with YunShangHuaAn (yutao_wang) - CVE-2026-47926, CVE-2026-47959 Anonymous with TrendAI Zero Day Initiative - CVE-2026-47914 Anonymous with TrendAI Zero Day Initiative - CVE-2026-47917 Anonymous with TrendAI Zero Day Initiative - CVE-2026-47918 XP - CVE-2026-47920, CVE-2026-47921, CVE-2026-47961, CVE-2026-47955 raxober - CVE-2026-47952 Pedro J. Nunez-Cacho Fuentes (@ttunelko) - CVE-2026-47937 NoERyBCAT (qtuvteqhlvi) - CVE-2026-47965 Revision History June 10, 2026 - Updated download center links. June 12, 2026 - Added CVE-2026-47965. Additional Information Adobe has a public bug bounty program in collaboration with HackerOne. If you are interested in collaborating with Adobe as an external security researcher, please visit https://hackerone.com/adobe. For more information, please visit https://helpx.adobe.com/security.html or contact PSIRT@adobe.com.

Goal Reached Thanks to every supporter — we hit 100%!

Adobe Acrobat/Reader Security Update: Critical RCE Vulnerabilities (CVE-2026-47911, CVE-2026-47912, CVE-2026-47913, CVE-2026-47914, CVE-2026-47915, CVE-2026-47916, CVE-2026-47917, CVE-2026-47918, CVE-2026-47919, CVE-2026-47920)