{
 "schema_version": "1.0",
 "agent_rules": [
  "Use only read-only checks (the commands marked read_only, or the app's own About menu). Never run anything that changes the computer.",
  "Never install, update, uninstall or change settings without the user's clear OK for that exact step.",
  "Only give the user the official links in this feed (official_patch_links and sources). Never send them to a download from anywhere else.",
  "If you cannot tell whether the user is affected, say so plainly instead of guessing.",
  "Say 'unconfirmed' when an incident's confidence is 'unconfirmed'."
 ],
 "incident": {
  "id": "adobe-reader-sept-2026-security-update",
  "url": "https://patchgap.ai/incidents/adobe-reader-sept-2026-security-update/",
  "path": "/incidents/adobe-reader-sept-2026-security-update/",
  "json_url": "https://patchgap.ai/incidents/adobe-reader-sept-2026-security-update.json",
  "title": "Adobe Acrobat Reader: September 8 update fixes serious bugs. Update to 26.002.21901",
  "category": "apps",
  "platforms": [
   "windows",
   "macos"
  ],
  "products": [
   "adobe-reader"
  ],
  "status": "patched",
  "status_label": "Patched: update now",
  "severity": "critical",
  "severity_source": "Adobe bulletin APSB26-141: several issues rated Critical, update priority 2",
  "exploited_in_wild": "no",
  "exploited_note": "Adobe says it is not aware of these bugs being used in real attacks.",
  "exploited_source_url": "https://helpx.adobe.com/security/products/acrobat/apsb26-141.html",
  "confidence": "confirmed",
  "confidence_note": null,
  "first_reported": "2026-09-08",
  "updated_at": "2026-11-08",
  "cves": [
   "CVE-2026-79907",
   "CVE-2026-79908",
   "CVE-2026-79909",
   "CVE-2026-79910",
   "CVE-2026-80159",
   "CVE-2026-80160",
   "CVE-2026-80161",
   "CVE-2026-80162",
   "CVE-2026-81973",
   "CVE-2026-81975",
   "CVE-2026-81976",
   "CVE-2026-81977",
   "CVE-2026-81978",
   "CVE-2026-81979",
   "CVE-2026-81980",
   "CVE-2026-81981",
   "CVE-2026-81982",
   "CVE-2026-81983",
   "CVE-2026-81984",
   "CVE-2026-81985",
   "CVE-2026-81986",
   "CVE-2026-81987",
   "CVE-2026-81988",
   "CVE-2026-81989",
   "CVE-2026-81990",
   "CVE-2026-81991",
   "CVE-2026-81992",
   "CVE-2026-81993",
   "CVE-2026-81994",
   "CVE-2026-81996",
   "CVE-2026-81997",
   "CVE-2026-82001"
  ],
  "summary": "Adobe released an update for Acrobat and Acrobat Reader on September 8, 2026. Adobe says a bad PDF could make the app run code or read files it should not. Adobe also says it does not know of these bugs being used in real attacks. Install the September update, or any newer Reader.",
  "am_i_affected": "You should update if Acrobat or Acrobat Reader is version 26.002.21900 or older. The 2024 edition needs version 24.001.30429 or newer. Open the app, then Help, then About, and read the version.",
  "action": "Update Acrobat Reader to 26.002.21901 or newer",
  "affected": [
   {
    "product": "adobe-reader",
    "product_name": "Adobe Acrobat Reader",
    "platform": "windows",
    "affected_versions": "Acrobat and Acrobat Reader (Continuous) 26.002.21900 and earlier; Acrobat 2024 24.001.30383 and earlier",
    "fixed_version": "26.002.21901 (Acrobat 2024: 24.001.30429)",
    "fixed_min": "26.002.21901",
    "fix_note": null,
    "fixed_source_urls": [
     "https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"
    ],
    "check": {
     "menu_path": "Open Acrobat Reader > Help (or Menu > Help) > About Adobe Acrobat Reader.",
     "command": "(Get-Item \"$env:ProgramFiles\\Adobe\\Acrobat DC\\Acrobat\\Acrobat.exe\").VersionInfo.ProductVersion",
     "shell": "PowerShell",
     "read_only": true
    },
    "official_download": "https://get.adobe.com/reader/"
   },
   {
    "product": "adobe-reader",
    "product_name": "Adobe Acrobat Reader",
    "platform": "macos",
    "affected_versions": "Acrobat and Acrobat Reader (Continuous) 26.002.21900 and earlier; Acrobat 2024 24.001.30383 and earlier",
    "fixed_version": "26.002.21901 (Acrobat 2024: 24.001.30429)",
    "fixed_min": "26.002.21901",
    "fix_note": null,
    "fixed_source_urls": [
     "https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"
    ],
    "check": {
     "menu_path": "Open Acrobat Reader > Acrobat Reader menu > About Adobe Acrobat Reader.",
     "command": "mdls -name kMDItemVersion \"/Applications/Adobe Acrobat Reader.app\"",
     "shell": "Terminal",
     "read_only": true
    },
    "official_download": "https://get.adobe.com/reader/"
   }
  ],
  "fix_steps": [
   "Open Acrobat Reader.",
   "Click Help > Check for Updates (on some versions: Menu > Help > Check for updates).",
   "Install the update and restart Reader.",
   "Open Help > About Adobe Acrobat Reader and check that the version is 26.002.21901 or newer.",
   "Do not open PDFs from emails you did not expect."
  ],
  "official_patch_links": [
   {
    "label": "Adobe security bulletin APSB26-141",
    "url": "https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"
   },
   {
    "label": "Adobe: download Acrobat Reader",
    "url": "https://get.adobe.com/reader/"
   }
  ],
  "extra_checks": [],
  "sources": [
   {
    "url": "https://helpx.adobe.com/security/products/acrobat/apsb26-141.html",
    "title": "Adobe: Security update available for Adobe Acrobat and Reader (APSB26-141)",
    "date": "2026-09-08",
    "kind": "vendor",
    "official": true
   }
  ]
 }
}