CVE-2026-34621

Adobe Acrobat and Reader are actively exploited for arbitrary code execution via prototype pollution.

This prototype pollution vulnerability enables remote code execution in Adobe Acrobat and Reader, which are widely deployed in defense environments. DIB organizations must immediately patch and audit their Acrobat installations to prevent ransomware or espionage entry points.

Shame score — Active exploitation of a high-severity RCE vulnerability in a ubiquitous DIB tool indicates a critical security gap.