ID:13038 - Exploit for Prototype pollution in Adobe Reader and Adobe Acrobat - CVE-2026-34621

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary JavaScript code.

The vulnerability exists due to improper input validation when handling PDF files. A remote attacker can trick the victim into opening a specially crafted PDF file and execute arbitrary code on the system.

Note, the vulnerability is being actively exploited in the wild. 

Remediation