CVE-2026-100134

Summary

Acrobat for Edge suffers from an out-of-bounds write (CWE-787) when processing a malicious file, potentially allowing arbitrary code execution in the user's context due to unsafe memory handling.

Exploitability

Exploitation requires user interaction—specifically, the victim must open a specially crafted file—making it moderately difficult and dependent on social engineering.

Blast radius

Successful exploitation could lead to full system compromise (data theft, malware deployment, or lateral movement) under the compromised user's privileges.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Acrobat for Edge version 2.590 or later, as this is the fixed version addressing CVE-2026-100134.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.