1. Cleus
  2. Zero-days
  3. CVE-2026-34621
Exploited in the wildComputers & everyday appsCould reach you

CVE-2026-34621 Adobe Acrobat and Reader: software flaw

In plain words: A mistake in the software that attackers have found a way to abuse. Depends on the product — see the description and the vendor advisory.

Confirmed exploited by CISA on · US federal patch deadline Apr 27, 2026

What to do

  1. Install Adobe's security update for Acrobat and Reader. If no update exists, follow the vendor's workaround or stop using the product until one ships.
  2. Turn on automatic updates for the operating system and for Office, PDF and archive apps.
  3. Be careful with unexpected attachments — documents, .zip/.rar files and shortcuts are common bait.
  4. Use a normal (non-admin) account day to day and keep built-in protection like Microsoft Defender on.

Read Adobe's advisory ↗

Who is affected

Could reach you. This one is aimed at devices or apps of the kind people own.

What's at risk: Your files, saved passwords and accounts. Many of these let a program that is already running gain full administrator control.

The details

Official name
Adobe Acrobat and Reader Prototype Pollution Vulnerability
Product
Adobe Acrobat and Reader
CISA description
Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution.
Type of flaw
Software flaw (CWE-1321)
Confirmed exploited
Apr 13, 2026
US federal patch deadline
Apr 27, 2026

Ask Cleus about it

Ask about a vulnerability, an update, a weird message, or the news. Plain-word answers, free, no account.

Answering about CVE-2026-34621 ·

Questions about CVE-2026-34621

Is CVE-2026-34621 being exploited?

Yes. CISA added CVE-2026-34621 to its Known Exploited Vulnerabilities catalog on Apr 13, 2026, which means there is reliable evidence of real-world attacks.

How do I fix CVE-2026-34621?

Install Adobe's security update for Acrobat and Reader. If no update exists, follow the vendor's workaround or stop using the product until one ships. Turn on automatic updates for the operating system and for Office, PDF and archive apps.

Am I affected by CVE-2026-34621?

Only if you use Adobe Acrobat and Reader. This one is aimed at devices or apps of the kind people own.

Other exploited Adobe vulnerabilities

Newest in the catalog

Search every known exploited vulnerability →