Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2026-34621

Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS 8.6 · HighBuzz score 72.1KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 72.1

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 27.1 · diversity 20.0 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
27.1
14 evidence mentions in the snapshot
Diversity score
20.0
8 sources across 3 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
1
within the 30d window
Peak daily
1
highest bucket

Evidence

Source links by recency

Newest mentions first
14 source links · newest first
  • CISA orders feds to patch max severity ColdFusion flaw by FridayBleepingComputer

    ed maximum-severity flaw in the Adobe ColdFusion commercial web app development platform by Friday. The vulnerability ( CVE-2026-48282 ) affects ColdFusion versions 2025.9, 2023.20, and earlier, and can be exploited by remote threat actors without privileges in low-complexity attacks to gain code execution on unpatched systems. Adobe released security

    newswww.bleepingcomputer.comJul 8, 2026, 7:16 AM
  • Three Bugs Walk Into a PDF: Prototype Pollution, Served Cold0day Fans

    TL;DR In April 2026, Adobe disclosed three critical security issues (CVE-2026-34621,CVE-2026-34622,CVE-2026-34626) affecting Acrobat DC, Acrobat Reader DC, and Acrobat 2024. According to Adobe’s advisories, these vulnerabilities could allow attackers to execute arbitrary code and leak user information

    newsstarlabs.sgApr 29, 2026, 12:01 AM
  • Security Affairs newsletter Round 573 by Pierluigi Paganini – INTERNATIONAL EDITIONSecurity Affairs

    A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Hidden VMs: how hackers leverage QEMU to stealthily steal data and spread malware Nexcorium Mirai variant […]

    newssecurityaffairs.comApr 19, 2026, 9:32 AM
  • Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limitsHelp Net Security

    Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Bringing governance and visibility to machine and AI identities In this Help Net Security interview, Archit Lohokare, CEO of AppViewX, explains how the rise of AI marked a turning point where machine and AI agent identities began converging into a single problem. Drawing on his experience across IBM and CyberArk, he describes the shift from human-driven systems to autonomous machines. … More →

    newswww.helpnetsecurity.comApr 19, 2026, 8:00 AM
  • Adobe Patches 55 Vulnerabilities Across 11 ProductsSecurityWeek

    Critical ColdFusion vulnerabilities are the most at risk of being exploited in attacks, according to the software giant.

    newswww.securityweek.comApr 14, 2026, 4:48 PM
  • Organizations Warned of Exploited Windows, Adobe Acrobat VulnerabilitiesSecurityWeek

    The security defects allow attackers to escalate privileges and execute arbitrary code remotely.

    newswww.securityweek.comApr 14, 2026, 8:57 AM
  • U.S. CISA adds Adobe, Fortinet, Microsoft Exchange Server, and Microsoft Windows flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs

    U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Adobe, Fortinet, Microsoft Exchange Server, and Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Apple, Laravel Livewire and Craft CMS flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the flaws added to the catalog: Last week, […]

    newssecurityaffairs.comApr 14, 2026, 7:38 AM
  • Simply opening a PDF could trigger this Adobe Reader zero-dayMalwarebytes Labs

    Even though it’s patched, Adobe confirmed it was exploited in the wild, so updating is urgent, not optional.

    newswww.malwarebytes.comApr 13, 2026, 11:38 AM
  • Adobe issues emergency fix for Acrobat Reader flaw exploited in the wild (CVE-2026-34621)Help Net Security

    Adobe has pushed out an emergency security update for Adobe Acrobat Reader, patching a zero-day vulnerability (CVE-2026-34621) exploited in the wild since November 2025. About CVE-2026-34621 CVE-2026-34621 is a critical prototype pollution vulnerability – a type of vulnerability that occurs in JavaScript and allows attackers to add or modify an application’s JavaScript objects and properties. CVE-2026-34621 can lead to arbitrary code execution in the context of the current user, but it cannot be triggered remotely. … More →

    newswww.helpnetsecurity.comApr 13, 2026, 10:04 AM
  • Adobe fixes actively exploited Acrobat Reader flaw CVE-2026-34621Security Affairs

    Adobe addressed a critical Acrobat Reader vulnerability, tracked as CVE-2026-34621, which is actively exploited to run malicious code. Adobe released emergency updates to address a critical vulnerability, tracked as CVE-2026-34621 (CVSS score of 8.6), in Adobe Acrobat Reader, which is being actively exploited. The flaw could allow attackers to execute malicious code on affected systems, […]

    newssecurityaffairs.comApr 12, 2026, 5:47 PM
  • Adobe Patches Reader Zero-Day Exploited for MonthsSecurityWeek

    The vulnerability is tracked as CVE-2026-34621 and Adobe has confirmed that it can be exploited for arbitrary code execution.

    newswww.securityweek.comApr 12, 2026, 7:45 AM
  • https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34621www.cisa.gov

    No excerpt available.

    Mitigationwww.cisa.govApr 11, 2026, 7:16 AM
  • https://helpx.adobe.com/security/products/acrobat/apsb26-43.htmlhelpx.adobe.com

    No excerpt available.

    Vendor Advisoryhelpx.adobe.comApr 11, 2026, 7:16 AM
  • Acrobat Reader zero-day exploited in the wild for many months (CVE-2026-34621)Help Net Security

    Unknown attackers have exploited a zero-day Adobe Acrobat Reader vulnerability since November 2025 and possibly even earlier, security researcher Haifei Li has discovered. PDF files carry the exploit Haifei Li is one of the creators of EXPMON, a sandbox-based cybersecurity system for detecting advanced file-based exploits. It does so by analyzing suspicious files submitted through its public web interface or API. “Just few weeks ago, on March 26, someone submitted a PDF sample to EXPMON. … More →

    newswww.helpnetsecurity.comApr 9, 2026, 11:44 AM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence