{
 "schema_version": "1.0",
 "agent_rules": [
  "Use only read-only checks (the commands marked read_only, or the app's own About menu). Never run anything that changes the computer.",
  "Never install, update, uninstall or change settings without the user's clear OK for that exact step.",
  "Only give the user the official links in this feed (official_patch_links and sources). Never send them to a download from anywhere else.",
  "If you cannot tell whether the user is affected, say so plainly instead of guessing.",
  "Say 'unconfirmed' when an incident's confidence is 'unconfirmed'."
 ],
 "incident": {
  "id": "adobe-reader-attacked-bug-apr-2026",
  "url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026/",
  "path": "/incidents/adobe-reader-attacked-bug-apr-2026/",
  "json_url": "https://patchgap.ai/incidents/adobe-reader-attacked-bug-apr-2026.json",
  "title": "Adobe Acrobat Reader: a bad PDF could take over your computer, and it was used in real attacks",
  "category": "apps",
  "platforms": [
   "windows",
   "macos"
  ],
  "products": [
   "adobe-reader"
  ],
  "status": "patched",
  "status_label": "Patched: update now",
  "severity": "critical",
  "severity_source": "Adobe: Critical, priority 1 (APSB26-43)",
  "exploited_in_wild": "yes",
  "exploited_note": "Adobe says it is aware of this being used in real attacks. CISA lists it too (added Apr 13, 2026).",
  "exploited_source_url": "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html",
  "confidence": "confirmed",
  "confidence_note": null,
  "first_reported": "2026-04-11",
  "updated_at": "2026-10-27",
  "cves": [
   "CVE-2026-34621"
  ],
  "summary": "Opening a booby-trapped PDF in Adobe Acrobat or Acrobat Reader could let it run its own code on your computer. Attackers were already doing this. Adobe fixed it on April 11, 2026.",
  "am_i_affected": "You are at risk if Acrobat Reader or Acrobat is version 26.001.21367 or older (Acrobat 2024: 24.001.30356 or older).",
  "action": "Update Acrobat Reader to 26.001.21411 or newer",
  "affected": [
   {
    "product": "adobe-reader",
    "product_name": "Adobe Acrobat Reader",
    "platform": "windows",
    "affected_versions": "Acrobat Reader and Acrobat (Continuous) 26.001.21367 and earlier; Acrobat 2024 24.001.30356 and earlier",
    "fixed_version": "26.001.21411 (Acrobat 2024: 24.001.30362 Windows / 24.001.30360 Mac)",
    "fixed_min": "26.001.21411",
    "fix_note": null,
    "fixed_source_urls": [
     "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html"
    ],
    "check": {
     "menu_path": "Open Acrobat Reader > Help (or Menu > Help) > About Adobe Acrobat Reader.",
     "command": "(Get-Item \"$env:ProgramFiles\\Adobe\\Acrobat DC\\Acrobat\\Acrobat.exe\").VersionInfo.ProductVersion",
     "shell": "PowerShell",
     "read_only": true
    },
    "official_download": "https://get.adobe.com/reader/"
   },
   {
    "product": "adobe-reader",
    "product_name": "Adobe Acrobat Reader",
    "platform": "macos",
    "affected_versions": "Acrobat Reader and Acrobat (Continuous) 26.001.21367 and earlier; Acrobat 2024 24.001.30356 and earlier",
    "fixed_version": "26.001.21411 (Acrobat 2024: 24.001.30362 Windows / 24.001.30360 Mac)",
    "fixed_min": "26.001.21411",
    "fix_note": null,
    "fixed_source_urls": [
     "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html"
    ],
    "check": {
     "menu_path": "Open Acrobat Reader > Acrobat Reader menu > About Adobe Acrobat Reader.",
     "command": "mdls -name kMDItemVersion \"/Applications/Adobe Acrobat Reader.app\"",
     "shell": "Terminal",
     "read_only": true
    },
    "official_download": "https://get.adobe.com/reader/"
   }
  ],
  "fix_steps": [
   "Open Acrobat Reader.",
   "Click Help > Check for Updates (on some versions: Menu > Help > Check for updates).",
   "Install the update and restart Reader.",
   "Do not open PDFs from emails you did not expect."
  ],
  "official_patch_links": [
   {
    "label": "Adobe security bulletin APSB26-43",
    "url": "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html"
   },
   {
    "label": "Adobe: download Acrobat Reader",
    "url": "https://get.adobe.com/reader/"
   }
  ],
  "extra_checks": [],
  "sources": [
   {
    "url": "https://helpx.adobe.com/security/products/acrobat/apsb26-43.html",
    "title": "Adobe: Security update available for Adobe Acrobat Reader (APSB26-43)",
    "date": "2026-04-11",
    "kind": "vendor",
    "official": true
   },
   {
    "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
    "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2026-34621 (added 2026-04-13)",
    "date": "2026-04-13",
    "kind": "cisa",
    "official": true
   },
   {
    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34621",
    "title": "NVD: CVE-2026-34621",
    "date": "2026-04-11",
    "kind": "nvd",
    "official": true
   }
  ]
 }
}