{“lastseen”:”2026-04-13T14:10:58″,”description”:”Opening the wrong PDF in Adobe Reader was enough to let criminals quietly spy on your computer and unleash more attacks, even though everything looked normal.\\n\\nA researcher analyzed a malicious PDF and found that it abused a previously unknown flaw (a \u201czero\u2011day\u201d) in Adobe Acrobat Reader.\\n\\nWhen a victim simply opens this PDF, hidden code inside it can read files that Acrobat Reader should not be allowed to access and send them to an attacker\u2019s server. Some tests show that it allows attackers to pull in additional malicious code from a remote server and run it on the victim\u2019s machine, potentially escaping Adobe\u2019s sandbox protections.\\n\\nIn its security bulletin, Adobe acknowledges that the vulnerability tracked as CVE-2026-34621, is being exploited in the wild.\\n\\nThe issue impacts the following products and versions for both Windows and macOS:\\n\\n * Acrobat DC versions 26.001.21367 and earlier (fixed in 26.001.21411)\\n * Acrobat Reader DC versions 26.001.21367 and earlier (fixed in 26.001.21411)\\n * Acrobat 2024 versions 24.001.30356 and earlier (fixed in 24.001.30362 for Windows and 24.001.30360 for macOS)\\n\\n\\n\\nExploitation requires you to open a malicious PDF, but nothing more. No extra clicks or permissions are needed. The researcher found malicious samples using this exploit dating back to November 11, 2025.\\n\\nTesting showed that a successful exploitation can:\\n\\n * Pull in JavaScript from a remote server and execute it inside Adobe Reader.\\n * Steal arbitrary local files and send them out, proving real\u2011world data theft is possible even without a full remote code execution chain.\\n\\n\\n\\n## How to stay safe\\n\\nThe easiest way to stay safe is to install the emergency update.\\n\\nThe latest product versions are available to end users via one of the following methods: \\n\\n * **Manually:** Go to Help \\u003e Check for updates\\n * **Automatically:** Updates install without user intervention when detected\\n * **Direct download:** Available from the Acrobat Reader Download Center\\n\\n\\n\\nFor IT administrators (managed environments):\\n\\n * Refer to the relevant release notes for installer links\\n * Deploy updates using AIP-GPO, bootstrapper, SCUP\/SCCM (Windows), or Apple Remote Desktop\/SSH (macOS)\\n\\n\\n\\nIf you\u2019re unable or unwilling to update right away:\\n\\n * Be extra cautious with PDFs from unknown senders or unexpected attachments, even after patching, as attackers may pivot to new variants. \\n * Use an up-to-date, real-time anti-malware solution to block known malicious servers and detect malware and exploits.\\n * Carefully monitor all HTTP\/HTTPS traffic for the \\”Adobe Synchronizer\\” string in the User Agent field.\\n\\n\\n\\n* * *\\n\\n**We don\u2019t just report on threats\u2014we remove them**\\n\\nCybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.”,”published”:”2026-04-13T11:38:36″,”modified”:”2026-04-13T11:38:36″,”type”:”malwarebytes”,”title”:”Simply opening a PDF could trigger this Adobe Reader zero-day”,”source”:””,”references”:””,”id”:”MALWAREBYTES:DDF291B8303C8EA6C638399470C04A54″,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[“CVE-2026-34621″],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:8.6,”severity”:”HIGH”,”vector”:”CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:R\/S:C\/C:H\/I:H\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.malwarebytes.com\/blog\/news\/2026\/04\/simply-opening-a-pdf-could-trigger-this-adobe-reader-zero-day”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-04-13T14:10:58″,”description”:”Opening the wrong PDF in Adobe Reader was enough to let criminals quietly spy on your computer and unleash more attacks, even though everything looked…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,81,12,15,115,13,7,11,5],"class_list":["post-46273","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-cvss-86","tag-exploit","tag-high","tag-malwarebytes","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n