What it is about

Adobe Reader ist ein Programm für die Anzeige von Dokumenten im Portable Document Format (PDF). Ein lokaler Angreifer kann eine Schwachstelle in Adobe Acrobat Reader ausnutzen, um vertrauliche Informationen offenzulegen und beliebigen Code auszuführen, was zu einer vollständigen Kompromittierung des Systems führen könnte.

Under what conditions?

Only with access to the device or an account on it. Often the second step after a phishing email.

What can happen in the worst case

An attacker could use the vulnerability to

• vertrauliche Informationen offenzulegen
• beliebigen Code auszuführen
• was zu einer vollständigen Kompromittierung des Systems führen könnte

Am I affected?

Affected according to the BSI:

• Adobe Acrobat Reader <=26.001.21367
• Adobe Acrobat DC <26.001.21411
• Adobe Acrobat Reader DC <26.001.21411
• Adobe Acrobat Windows <24.001.30362
• Adobe Acrobat Mac <24.001.30360

The installed version is usually shown under “Help → About” or in the device’s admin interface.

What helps?

Update to at least:

• Adobe Acrobat Reader <=26.001.21367
• Adobe Acrobat DC 26.001.21411
• Adobe Acrobat Reader DC 26.001.21411
• Adobe Acrobat Windows 24.001.30362
• Adobe Acrobat Mac 24.001.30360

Is the vulnerability already being exploited?

• CVE-2026-34621: exploited in the wild according to CISA, in the catalogue since 13.04.2026.