Skip to content
Appaloosa Scout
Language selector
fr en

KEV · Actively exploited

CVE-2026-34621

CVE-2026-34621 is actively exploited (CISA KEV catalog) : high severity (CVSS 8.6), 2 tracked apps concerned, none still exposed on their current version.

Severity (CVSS)
8.6

NVD scale

Exploitation
Confirmed
Tracked apps
2
Still exposed
0

Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Attack vector : Local No privileges required
Show raw CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CISA Known Exploited Vulnerability

Added to KEV
2026-04-13
Remediation deadline
2026-04-27
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Ransomware
Unknown (not documented by CISA)

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

NVD references 5 distinct products for this CVE : only those tracked by Scout (mobile and desktop catalog apps) are listed above. Libraries, servers and out-of-scope products do not appear here. Full list on NVD ↗

Vulnerable CPE configurations (4)
Vendor Product Versions
adobe acrobat
All platforms (wildcard)
 ≥24.0.0 <24.001.30362
adobe acrobat
All platforms (wildcard)
 ≥24.0.0 <24.001.30362
adobe acrobat
All platforms (wildcard)
 ≥24.0.0 <24.001.30360
adobe acrobat
All platforms (wildcard)
 ≥24.0.0 <24.001.30360
View on NVD ↗ CISA KEV catalog ↗ Advisory · helpx.adobe.com