{"id":"CVE-2026-100134","published":"2026-10-20T19:17:11.213","lastModified":"2026-10-21T16:17:13.790","description":"Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-787"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100134","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Acrobat for Edge suffers from an out-of-bounds write (CWE-787) when processing a malicious file, potentially allowing arbitrary code execution in the user's context due to unsafe memory handling.","exploitability":"Exploitation requires user interaction—specifically, the victim must open a specially crafted file—making it moderately difficult and dependent on social engineering.","blast_radius":"Successful exploitation could lead to full system compromise (data theft, malware deployment, or lateral movement) under the compromised user's privileges.","remediation":"Upgrade to Acrobat for Edge version 2.590 or later, as this is the fixed version addressing CVE-2026-100134.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["out-of-bounds-write","rce","user-interaction","pdf","memory-corruption"],"model":"garnet-coder","analyzedAt":"2026-10-26T09:02:45.361Z"}}