VDB
CVE-2026-34621
CVE-2026-34621
PUBLISHED
KEV
CVSS 8.600000381469727 HIGH
Adobe has released a security update for Adobe Acrobat and Reader for Windows and macOS. This update addresses a critical vulnerability. Successful exploitation could lead to arbitrary code execution. Adobe is aware of CVE-2026-34621 being exploited in the wild. Vulnerability: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321) Impact: Arbitrary code execution Severity: Critical CVSS: 8.6 CWE: CWE-1321
EPSS 2.18% · 82.2th percentile
Risk Scores
CVSS 3.1
8.600000381469727
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS Score
2.18%
82.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Acrobat 2024 | 24.001.30356, 24.001.30356, 24.001.30356 |
| Adobe | Acrobat Reader DC | 26.001.21367, 26.001.21367, 26.001.21367 |
| Adobe | Acrobat DC | 26.001.21367, 26.001.21367, 26.001.21367 |
Timeline
- Jan 21, 2026 PoC Published
- Apr 7, 2026 VulnCheck KEV Exploitation
- Apr 9, 2026 CVE Published
- Apr 11, 2026 VulnCheck KEV Exploitation
- Apr 11, 2026 PoC Published
- Apr 11, 2026 PoC Published
- Apr 11, 2026 PoC Published
- Apr 11, 2026 PoC Published
- Apr 11, 2026 PoC Published
- Apr 11, 2026 PoC Published
- Apr 11, 2026 PoC Published
- Apr 11, 2026 PoC Published