Adobe Acrobat and Reader are vulnerable to a critical privilege escalation flaw that allows a low-privileged attacker to gain elevated system access.

The software contains an incorrect authorization vulnerability (CWE-863) that allows a locally authenticated user with low privileges to bypass authorization checks. This flaw can be triggered without user interaction and results in a change of scope, granting the attacker elevated privileges on the host system.

The ability for a low-privileged user to escalate their permissions to a higher level poses a severe risk to organizational data integrity and system confidentiality. Given the CVSS score of 8.8, this vulnerability is classified as High severity and could allow an attacker to bypass security boundaries, potentially leading to full system compromise or unauthorized access to sensitive documents processed by the application.

Immediate Action: Update Adobe Acrobat and Acrobat Reader to versions 26.002.21901 or later, and Adobe Acrobat 2024 to version 24.001.30429 or later, as detailed in Adobe Security Bulletin APSB26-141.

Proactive Monitoring: Monitor system logs for unexpected privilege changes or suspicious process execution patterns originating from standard user accounts.

Compensating Controls: Ensure that the principle of least privilege is strictly enforced on all workstations and servers where Adobe software is deployed to limit the potential impact of local escalation attempts.

Public Exploit Available: Unknown

This vulnerability represents a significant security risk for environments utilizing Adobe Acrobat products. Administrators should prioritize the deployment of the provided updates across all enterprise endpoints immediately to mitigate the risk of local privilege escalation. Ensuring that software remains at the latest patch level is essential to maintaining the security posture of the host environment.