Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-47925

CVE-2026-47925MEDIUM

Adobe Acrobat DC — Acrobat Reader | Integer Overflow or Wraparound (CWE-190)

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   N   R  U  N  N  H    5.5   .0025   14.9     —

AFFECTED
  Product            Versions     Fixed
  Acrobat DC         unspecified  26.001.21662
  Acrobat Reader DC  unspecified  26.001.21662
  Acrobat 2024       unspecified  24.001.30383

TIMELINE
  May 20  Reserved by adobe
  Jun 9   Published (CNA: adobe)
  Aug 26  PATCH SHIPPED — CVE-2026-47925 (Adobe Acrobat DC). Fixed in Acrobat DC 26.001.21662.

CWE-190 · CNA: adobe · CVSS v3.1 · 1 reference · NVD status: Analyzed

Description

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
May 20, 2026	Reserved	Reserved by adobe
June 9, 2026	Published	Published (CNA: adobe)
August 26, 2026	PATCH SHIPPED	PATCH SHIPPED — CVE-2026-47925 (Adobe Acrobat DC). Fixed in Acrobat DC 26.001.21662.

Affected

Affected products and packages — 3 rows
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Adobe	Acrobat DC	—	—	26.001.21662
Adobe	Acrobat Reader DC	—	—	26.001.21662
Adobe	Acrobat 2024	—	—	24.001.30383

Weaknesses

CWE-190

References (1)

https://helpx.adobe.com/security/products/acrobat/apsb26-63.html [Vendor Advisory]

Authoritative record: CVE-2026-47925 at cve.org

Vendors: adobe

Weaknesses: CWE-190

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-47925 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.