Adobe rolls out emergency fix for Acrobat, Reader zero-day flaw

Adobe has issued an urgent security patch for Acrobat and Reader to address a zero-day vulnerability, identified as CVE-2026-34621, which has been actively exploited by attackers since December. This flaw allows malicious actors to execute arbitrary code, posing a significant threat to users. The emergency fix is crucial, as the vulnerability has been leveraged in real-world attacks, highlighting the need for prompt remediation. The update is available for various versions of Acrobat and Reader, emphasizing the importance of keeping software up-to-date to prevent exploitation. The disclosure of CVE-2026-34621 expands the attack surface, making it essential for organizations to prioritize mitigation based on their exposure and evidence of exploitation¹. This vulnerability underscores the need for vigilance and prompt action to protect against zero-day threats, making it a critical concern for security practitioners.