CVE-2026-81987: Acrobat Reader | Integer Overflow or Wraparound (CWE-190)
Vulnerability summary
CVE-2026-81987 is a high (CVSS 7.8) Integer Overflow or Wraparound vulnerability in adobe acrobat. EPSS estimates a 0.31% chance of exploitation in the next 30 days, higher than 24.4% of scored vulnerabilities.
Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Timeline
- 08-09-2026PublishedVulnerability first disclosed.
- 10-09-2026Last modifiedVulnerability information updated.
Description
Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.31%
Chance of exploitation in the next 30 days
Percentile
24%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.31% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Adobe6 products
- acrobat≥ 24.001.20604, < 24.001.30429
- acrobat 2024≤ 24.001.30383
- acrobat_dc≥ 15.008.20082, < 26.002.21901
- acrobat_reader≤ 26.002.21900
- acrobat_reader_dc≥ 15.008.20082, < 26.002.21901
1 vendor · 6 products
References
1 links- helpx.adobe.com/security/products/acrobat/apsb26-141.htmlVendor Advisory