Adobe Patches Critical Acrobat/Reader Zero-Day Exploited for Months

Key Points

• CVE-2026-34621 is a critical zero-day in Acrobat/Reader exploited for months
• Vulnerability allows arbitrary code execution, not just information disclosure
• Adobe has released emergency patches; users must update immediately
• Security researchers are analyzing the exploits to identify threat actors

Full Details

Adobe issued emergency security updates over the weekend to address a critical zero-day vulnerability tracked as CVE-2026-34621 in its Acrobat and Reader software. The company confirmed that this flaw, which has been exploited in the wild for several months, can be leveraged for arbitrary code execution rather than mere information disclosure. This vulnerability poses a significant risk to users who handle PDF documents from untrusted sources, as successful exploitation could allow attackers to take control of affected systems. Security researchers are actively analyzing the exploits to identify the threat actors behind the attacks. The patches are now available for download, and users are strongly urged to update their software immediately to mitigate this serious security threat.