Adobe patches essential Acrobat Reader zero-day flaw. Replace ASAP

Up to date April 14th, 2026: Adobe has launched an emergency repair that closes the intense vulnerability in Acrobat Reader defined beneath. Customers are urged to replace Acrobat Reader to model 26.001.21411 as quickly as attainable. When you’re working the 2024 model of Acrobat, 24.001.30362 for Home windows and 24.001.30360 applies for Mac. If you wish to postpone the replace for any cause, be sure you keep away from opening unknown PDF information as you’ll nonetheless be susceptible to this exploit.

Unique story from April tenth, 2026: Based on BleepingComputer, there’s a severe vulnerability in Acrobat Reader that may be exploited to steal delicate information.

Safety researcher Haifei Li says that hackers have been abusing this “extremely subtle, fingerprinting-style PDF exploit” since December, which means simply over 4 months.

“This ‘fingerprinting’ exploit has been confirmed to leverage a zero-day/unpatched vulnerability that works on the most recent model of Adobe Reader with out requiring any person interplay past opening a PDF file. Much more regarding, this exploit permits the menace actor to not solely accumulate/steal native info but in addition probably launch subsequent RCE/SBX assaults, which may result in full management of the sufferer’s system.”

In brief, all it takes is opening an contaminated PDF file to reveal your system to an attacker. From there, the attacker may steal your information and even run their very own code and take full management of your machine.

Till Adobe patches the vulnerability, Acrobat Reader customers are suggested to not open PDF information from untrusted sources—which is actually good sense even with out the specter of this exploit.