CVE-2026-27221

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-27221", "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538", "state": "PUBLISHED", "assignerShortName": "adobe", "dateReserved": "2026-02-18T22:02:41.380Z", "datePublished": "2026-03-10T21:41:36.952Z", "dateUpdated": "2026-08-27T22:09:29.990Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Acrobat DC", "vendor": "Adobe", "versions": [{"lessThanOrEqual": "25.001.21265", "status": "affected", "version": "0", "versionType": "custom"}, {"status": "unaffected", "version": "25.001.21288", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "Acrobat Reader DC", "vendor": "Adobe", "versions": [{"lessThanOrEqual": "25.001.21265", "status": "affected", "version": "0", "versionType": "custom"}, {"status": "unaffected", "version": "25.001.21288", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "Acrobat 2024", "vendor": "Adobe", "versions": [{"lessThanOrEqual": "24.001.30307 (Win), 24.001.30308 (Mac)", "status": "affected", "version": "0", "versionType": "custom"}, {"status": "unaffected", "version": "24.001.30356", "versionType": "custom"}]}], "datePublic": "2026-03-10T17:00:00.000Z", "descriptions": [{"lang": "en", "value": "Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to spoof the identity of a signer. Exploitation of this issue requires user interaction."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "environmentalScore": 5.5, "environmentalSeverity": "MEDIUM", "exploitCodeMaturity": "NOT_DEFINED", "integrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "LOW", "modifiedAttackVector": "LOCAL", "modifiedAvailabilityImpact": "NONE", "modifiedConfidentialityImpact": "NONE", "modifiedIntegrityImpact": "HIGH", "modifiedPrivilegesRequired": "NONE", "modifiedScope": "UNCHANGED", "modifiedUserInteraction": "REQUIRED", "privilegesRequired": "NONE", "remediationLevel": "NOT_DEFINED", "reportConfidence": "NOT_DEFINED", "scope": "UNCHANGED", "temporalScore": 5.5, "temporalSeverity": "MEDIUM", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-295", "description": "Improper Certificate Validation (CWE-295)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "078d4453-3bcd-4900-85e6-15281da43538", "shortName": "adobe", "dateUpdated": "2026-08-27T22:09:29.990Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://helpx.adobe.com/security/products/acrobat/apsb26-26.html"}], "source": {"discovery": "EXTERNAL"}, "title": "Acrobat Reader | Improper Certificate Validation (CWE-295)", "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-27221", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-11T03:57:08.259918Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-11T13:08:15.923Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-27221", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-11T03:57:08.259918Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-11T13:02:03.066Z"}}], "cna": {"title": "Acrobat Reader | Improper Certificate Validation (CWE-295)", "source": {"discovery": "EXTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "modifiedScope": "UNCHANGED", "temporalScore": 5.5, "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "remediationLevel": "NOT_DEFINED", "reportConfidence": "NOT_DEFINED", "temporalSeverity": "MEDIUM", "availabilityImpact": "NONE", "environmentalScore": 5.5, "privilegesRequired": "NONE", "exploitCodeMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "LOCAL", "confidentialityImpact": "NONE", "environmentalSeverity": "MEDIUM", "availabilityRequirement": "NOT_DEFINED", "modifiedIntegrityImpact": "HIGH", "modifiedUserInteraction": "REQUIRED", "modifiedAttackComplexity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAvailabilityImpact": "NONE", "modifiedPrivilegesRequired": "NONE", "modifiedConfidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Adobe", "product": "Acrobat DC", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "25.001.21265"}, {"status": "unaffected", "version": "25.001.21288", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Adobe", "product": "Acrobat Reader DC", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "25.001.21265"}, {"status": "unaffected", "version": "25.001.21288", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Adobe", "product": "Acrobat 2024", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "24.001.30307 (Win), 24.001.30308 (Mac)"}, {"status": "unaffected", "version": "24.001.30356", "versionType": "custom"}], "defaultStatus": "unaffected"}], "datePublic": "2026-03-10T17:00:00.000Z", "references": [{"url": "https://helpx.adobe.com/security/products/acrobat/apsb26-26.html", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to spoof the identity of a signer. Exploitation of this issue requires user interaction."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-295", "description": "Improper Certificate Validation (CWE-295)"}]}], "providerMetadata": {"orgId": "078d4453-3bcd-4900-85e6-15281da43538", "shortName": "adobe", "dateUpdated": "2026-08-27T22:09:29.990Z"}}}, "cveMetadata": {"cveId": "CVE-2026-27221", "state": "PUBLISHED", "dateUpdated": "2026-08-27T22:09:29.990Z", "dateReserved": "2026-02-18T22:02:41.380Z", "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538", "datePublished": "2026-03-10T21:41:36.952Z", "assignerShortName": "adobe"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Acrobat DC", "vendor": "Adobe", "versions": [{"lessThanOrEqual": "25.001.21265", "status": "affected", "version": "0", "versionType": "custom"}, {"status": "unaffected", "version": "25.001.21288", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "Acrobat Reader DC", "vendor": "Adobe", "versions": [{"lessThanOrEqual": "25.001.21265", "status": "affected", "version": "0", "versionType": "custom"}, {"status": "unaffected", "version": "25.001.21288", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "Acrobat 2024", "vendor": "Adobe", "versions": [{"lessThanOrEqual": "24.001.30307 (Win), 24.001.30308 (Mac)", "status": "affected", "version": "0", "versionType": "custom"}, {"status": "unaffected", "version": "24.001.30356", "versionType": "custom"}]}], "source": "psirt@adobe.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*", "matchCriteriaId": "02783E59-AA2E-4AC3-9675-6487AE0C9068", "versionEndExcluding": "25.001.21288", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E", "vulnerable": false}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*", "matchCriteriaId": "70AABB39-8370-495D-AC09-2F30A1AB83AF", "versionEndExcluding": "25.001.21288", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E", "vulnerable": false}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*", "matchCriteriaId": "9F95602E-25EA-45D7-9A60-DC7A01CD6AFE", "versionEndExcluding": "24.001.30356", "versionStartIncluding": "24.001.20604", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E", "vulnerable": false}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to spoof the identity of a signer. Exploitation of this issue requires user interaction."}, {"lang": "es", "value": "Las versiones de Acrobat Reader 24.001.30307, 24.001.30308, 25.001.21265 y anteriores est\u00e1n afectadas por una vulnerabilidad de Validaci\u00f3n de Certificado Inapropiada que podr\u00eda resultar en una omisi\u00f3n de caracter\u00edstica de seguridad. Un atacante podr\u00eda aprovechar esta vulnerabilidad para suplantar la identidad de un firmante. La explotaci\u00f3n de este problema requiere interacci\u00f3n del usuario."}], "id": "CVE-2026-27221", "lastModified": "2026-08-28T00:17:05.167", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "psirt@adobe.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-27221", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-03-11T03:57:08.259918Z", "version": "2.0.3"}}]}, "published": "2026-03-10T22:16:18.090", "references": [{"source": "psirt@adobe.com", "tags": ["Vendor Advisory"], "url": "https://helpx.adobe.com/security/products/acrobat/apsb26-26.html"}], "sourceIdentifier": "psirt@adobe.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-295"}], "source": "psirt@adobe.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,25.001.21265]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Acrobat Reader", "source": "cna", "vendor": "Adobe"}, "product": "acrobat_reader", "vendor": "adobe"}], "analysis": {"en": {"generated_at": "2026-04-16T03:07:41.505462+00:00", "value": {"mitigation_remediation": ["Apply the latest Adobe Acrobat Reader update that addresses improper certificate validation, as detailed in the Adobe Security Bulletin APSB26-26.", "If an update cannot be applied immediately, restrict Adobe Acrobat Reader from executing embedded scripts or interactive content in PDF files, thereby reducing the potential impact of a spoofed signature.", "Educate users to verify the authenticity of PDF signatures and to be cautious of documents from untrusted sources before opening them."], "summary": {"action": "Immediate Update", "impact": "Certificate Validation Bypass"}, "threat_synthesis": {"affected_systems": "Adobe Acrobat Reader, including the Acrobat Reader DC family. Versions affected are 24.001.30307, 24.001.30308, 25.001.21265 and all earlier releases. The vulnerability applies across platforms where Acrobat Reader is deployed, including macOS and Windows operating systems.", "description_and_impact": "Adobe Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier suffer from an improper certificate validation flaw that can allow an attacker to spoof the identity of a document signer, thereby bypassing the software\u2019s security checks. The flaw does not provide remote code execution but can undermine user confidence in signed PDFs and facilitate social\u2011engineering attacks by convincing users that a malicious file originates from a trusted source.", "risk_and_exploitability": "The CVSS v3.1 score of 5.5 marks this as a medium\u2011severity weakness, and the EPSS probability is listed as less than 1 percent, indicating low likelihood of exploitation at present. The Adobe advisory specifies that the flaw requires user interaction; typically this would involve opening a malicious PDF that contains a forged signature. The flaw is not listed in the CISA KEV catalog, so no known active exploits have been reported publicly yet. Nonetheless, the ability to fake the identity of a signer poses a significant risk in environments where document authenticity is critical."}}}}, "created": "2026-03-11T11:39:13.287465+00:00", "updated": "2026-04-16T03:15:22.946478+00:00", "vendors": ["adobe", "adobe$PRODUCT$acrobat_reader"]}