Changeflow GovPing Data Privacy & Cybersecurity Critical Adobe Acrobat Vulnerability CVE-2026-3...
Urgent Notice Added Final

Critical Adobe Acrobat Vulnerability CVE-2026-34621 Actively Exploited

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published
Detected
Email

Summary

CERT-FR issued advisory CERTFR-2026-AVI-0429 warning of a critical vulnerability in Adobe Acrobat (CVE-2026-34621) that allows arbitrary code execution. The vulnerability affects Acrobat 2024, Acrobat DC, and Acrobat Reader DC on Windows and macOS. Adobe has confirmed the vulnerability is being actively exploited in the wild. Users are advised to apply vendor patches immediately.

View original document View source feed page

What changed

CERT-FR published advisory CERTFR-2026-AVI-0429 notifying of a critical arbitrary code execution vulnerability (CVE-2026-34621) in Adobe Acrobat and Reader products. The vulnerability affects multiple versions of Acrobat 2024, Acrobat DC, and Acrobat Reader DC running on Windows and macOS. Adobe has confirmed that CVE-2026-34621 is being actively exploited in the wild, indicating real-world attacks are occurring.

Organizations running affected Adobe Acrobat installations should prioritize patching immediately. Users of Acrobat 2024 must update to version 24.001.30360 (macOS) or 24.001.30362 (Windows) or later. Users of Acrobat DC and Acrobat Reader DC must update to version 26.001.21411 or later. Patches are available through the Adobe Security Bulletin APSB26-43 dated April 11, 2026.

What to do next

  1. Apply Adobe security patches from APSB26-43 to all affected Acrobat installations
  2. Update Acrobat 2024 to version 24.001.30360 (macOS) or 24.001.30362 (Windows)
  3. Update Acrobat DC and Reader DC to version 26.001.21411

Archived snapshot

Apr 13, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 13 avril 2026 N° CERTFR-2026-AVI-0429 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Vulnérabilité dans Adobe Acrobat

Gestion du document

| Référence | CERTFR-2026-AVI-0429 |
| Titre | Vulnérabilité dans Adobe Acrobat |
| Date de la première version | 13 avril 2026 |
| Date de la dernière version | 13 avril 2026 |
| Source(s) | Bulletin de sécurité Adobe APSB26-43 du 11 avril 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risque

  • Exécution de code arbitraire

Systèmes affectés

  • Acrobat 2024 versions antérieures à 24.001.30360 sur macOS
  • Acrobat 2024 versions antérieures à 24.001.30362 sur Windows
  • Acrobat DC versions antérieures à 26.001.21411 sur Windows et macOS
  • Acrobat Reader DC versions antérieures à 26.001.21411 sur Windows et macOS

Résumé

Une vulnérabilité a été découverte dans Adobe Acrobat. Elle permet à un attaquant de provoquer une exécution de code arbitraire.

Adobe indique que la vulnérabilité CVE-2026-34621 est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 13 avril 2026 Version initiale

Related changes

Favicon for www.cert.ssi.gouv.fr Spring Cloud Gateway Vulnerability CVE-2026-22750
Priority review Apr 10, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cisa.gov Adobe Acrobat Use-After-Free Vulnerability CVE-2020-9715
Priority review Apr 14, 2026 • CISA Known Exploited Vulnerabilities (KEV) • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Adobe Product Vulnerabilities Allow Remote Code Execution, DoS, Security Bypass
Urgent Apr 15, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity

Get daily alerts for CERT-FR Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-FR.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Press inquiries →

Classification

Agency
CERT-FR
Published
April 13th, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
CERTFR-2026-AVI-0429

Who this affects

Applies to
Technology companies Government agencies Consumers
Industry sector
5112 Software & Technology
Activity scope
Software vulnerability patching Arbitrary code execution prevention
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Software & Technology Consumer Protection

Browse Categories

Agriculture & Food Safety 64 AI Regulation 3 Banking & Finance 292 Consumer Protection 46 Courts & Legal 361 Data Privacy & Cybersecurity 76 Defense & National Security 51 Education 21 Energy 100 Environment 86 Environmental & Energy 4 Environmental Regulation 7 Financial Regulation 2 Government & Legislation 279 Government Operations 2 Healthcare 136 Healthcare & Life Sciences 3 Housing 16 Immigration 8 Immigration & Border Control 1 Insurance 58 Labor & Employment 113 Legal & Judicial 5 Pharma & Drug Safety 104 Public Health 2 Real Estate & Housing 2 Sanctions & Export Controls 1 Securities & Markets 103 Securities Regulation 6 Tax 65 Telecom & Technology 47 Trade & Commerce 2 Trade & Sanctions 135 Transportation 58

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!