Multiple Adobe Acrobat Vulnerabilities Disclosed on September 10, 2026

On September 10, 2026, multiple vulnerabilities affecting Adobe Acrobat Pro DC and Adobe Acrobat Reader DC were disclosed, allowing remote attackers to execute arbitrary code or disclose sensitive information. The vulnerabilities include integer overflows, underflows, and use-after-free conditions, primarily related to the parsing of various file formats such as JPEG, PDF, and JBIG2. User interaction is required for exploitation, as victims must visit malicious pages or open harmful files. Adobe has issued updates to address these vulnerabilities. The vulnerabilities are tracked under several advisories, including ZDI-26-658, ZDI-26-672, and ZDI-26-668, among others. The flaws could potentially allow attackers to leverage them in conjunction with other vulnerabilities for more severe exploits. Administrators are urged to apply the updates immediately to mitigate risks.

Key Points: • Multiple vulnerabilities in Adobe Acrobat products disclosed on September 10, 2026. • Exploitation requires user interaction, with updates available to mitigate risks. • Flaws include integer overflows, underflows, and use-after-free conditions.