Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621

Adobe released emergency updates to fix a critical security vulnerability (CVE-2026-34621) in Acrobat Reader that is actively being exploited in the wild. - The vulnerability carries a CVSS score of 8.6 and is classified as a prototype pollution flaw in JavaScript that allows arbitrary code execution. - Affected versions include Acrobat DC 26.001.21367 and earlier, Acrobat Reader DC 26.001.21367 and earlier, and Acrobat 2024 versions 24.001.30356 and earlier. - The flaw can be exploited through specially crafted PDF documents that execute malicious JavaScript code when opened in Adobe Reader. - Evidence indicates the vulnerability has been under active exploitation since December 2025.

This summary was automatically generated by AI based on the original article and may not be fully accurate.