Adobe released an update for Acrobat and Acrobat Reader on September 8, 2026. Adobe says a bad PDF could make the app run code or read files it should not. Adobe also says it does not know of these bugs being used in real attacks. Install the September update, or any newer Reader.
- Status
- Patched: update now
- Being attacked?
- No[1]
- Severity
- Critical
- Updated
Adobe says it is not aware of these bugs being used in real attacks. Severity: Adobe bulletin APSB26-141: several issues rated Critical, update priority 2 First reported .
Am I affected?
You should update if Acrobat or Acrobat Reader is version 26.002.21900 or older. The 2024 edition needs version 24.001.30429 or newer. Open the app, then Help, then About, and read the version.
| App | Device | Affected | Fixed in |
|---|---|---|---|
| Adobe Acrobat Reader | Windows, Mac | Acrobat and Acrobat Reader (Continuous) 26.002.21900 and earlier; Acrobat 2024 24.001.30383 and earlier | 26.002.21901 (Acrobat 2024: 24.001.30429)[1] |
How to check your version
These checks only look. They do not change anything on your computer.
Adobe Acrobat Reader on Windows
Easy way: Open Acrobat Reader > Help (or Menu > Help) > About Adobe Acrobat Reader.
Or type this in PowerShellRead-only. It only reads the version and changes nothing.
(Get-Item "$env:ProgramFiles\Adobe\Acrobat DC\Acrobat\Acrobat.exe").VersionInfo.ProductVersion
Adobe Acrobat Reader on Mac
Easy way: Open Acrobat Reader > Acrobat Reader menu > About Adobe Acrobat Reader.
Or type this in TerminalRead-only. It only reads the version and changes nothing.
mdls -name kMDItemVersion "/Applications/Adobe Acrobat Reader.app"
How to fix it
- Open Acrobat Reader.
- Click Help > Check for Updates (on some versions: Menu > Help > Check for updates).
- Install the update and restart Reader.
- Open Help > About Adobe Acrobat Reader and check that the version is 26.002.21901 or newer.
- Do not open PDFs from emails you did not expect.
More on each app: Is my Adobe Reader up to date?
Official links
Check before installing, and only use these official links or the app's own update button.
For AI agents
This page as data: /incidents/adobe-reader-sept-2026-security-update.json. All problems: /feed.json. Use read-only checks only, and ask before installing anything.
Tracking numbers (CVE): CVE-2026-79907, CVE-2026-79908, CVE-2026-79909, CVE-2026-79910, CVE-2026-80159, CVE-2026-80160, CVE-2026-80161, CVE-2026-80162, CVE-2026-81973, CVE-2026-81975, CVE-2026-81976, CVE-2026-81977, CVE-2026-81978, CVE-2026-81979, CVE-2026-81980, CVE-2026-81981, CVE-2026-81982, CVE-2026-81983, CVE-2026-81984, CVE-2026-81985, CVE-2026-81986, CVE-2026-81987, CVE-2026-81988, CVE-2026-81989, CVE-2026-81990, CVE-2026-81991, CVE-2026-81992, CVE-2026-81993, CVE-2026-81994, CVE-2026-81996, CVE-2026-81997, CVE-2026-82001
Sources
- MakerAdobe: Security update available for Adobe Acrobat and Reader (APSB26-141) (Sep 8, 2026)
"Maker", "CISA", "NVD", "GitHub advisory" and "Official notice" are official sources. "Researcher" and "News" are extra context.