{"id":"CVE-2026-100134","title":"Acrobat for Edge | Out-of-bounds Write (CWE-787)","summary":"Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a mali…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-787"],"vendor":"Adobe","product":"Acrobat for Edge","affected":["acrobat_for_edge <= 154.0.4258.37"],"published":"2026-10-20","updated":"2026-10-20","sourceUpdated":"2026-10-20T18:18:37.073Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-100134","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100134"}],"tags":["cve.org"],"ingestedAt":"2026-10-20T19:16:14.552Z","slug":"CVE-2026-100134","body":"## Overview\n\nAcrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n## Affected\n\n- `acrobat_for_edge <= 154.0.4258.37`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}