CVE-2026-81997

Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

• CWE-863

• https://helpx.adobe.com/security/products/acrobat/apsb26-141.htmlVendor Advisory

Published

Sep 8, 2026

Last Modified

Sep 10, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-81990Acrobat Reader is affected by a Use After Free vulnerability…7.8
• CVE-2026-81991Acrobat Reader is affected by an out-of-bounds read vulnerab…5.5
• CVE-2026-81992Acrobat Reader is affected by a Heap-based Buffer Overflow v…7.8
• CVE-2026-81993Acrobat Reader is affected by a Heap-based Buffer Overflow v…5.5
• CVE-2026-81994Acrobat Reader is affected by an Improperly Controlled Modif…6.3
• CVE-2026-81996Acrobat Reader is affected by an Incorrect Authorization vul…8.8
• CVE-2026-8200When schema validation is enabled on a collection and an upd…5.3
• CVE-2026-82001Acrobat Reader is affected by an Uncontrolled Resource Consu…5.5
• CVE-2026-82004Adobe Campaign Classic (ACC) is affected by an Improper Neut…10
• CVE-2026-82005Photoshop Desktop is affected by an out-of-bounds write vuln…7.8
• CVE-2026-82006Photoshop Desktop is affected by a Heap-based Buffer Overflo…7.8
• CVE-2026-82007Photoshop Desktop is affected by an Integer Overflow or Wrap…7.8