Archive — US — techcrunch
Adobe fixes PDF zero-day security bug that hackers have exploited for months
Adobe has patched a zero-day vulnerability (CVE-2026-34621) in Acrobat DC and Reader DC, exploited for months to remotely install malware via malicious PDF files. The flaw affects Windows and macOS users, leading to potential full system control. Adobe urges users to update their software to mitigate risks.
Key points
- Vulnerability CVE-2026-34621 existed for at least four months.
- Hackers trick users into opening harmful PDF files to exploit this vulnerability.
- The bug affects Adobe Acrobat DC, Reader DC, and Acrobat 2024 on Windows and macOS.
- Exploiting this vulnerability can grant hackers full control over the victim’s system.
- Security researcher Haifei Li discovered the exploit after analyzing malicious PDFs.
- Adobe confirmed active exploitation of the bug and urged users to update software.
Why it matters
- Zero-day vulnerabilities have been a growing concern, especially as remote work increases reliance on digital tools.
- Historically, Adobe products have been frequent targets for cybercriminals, highlighting the importance of software updates.
- In 2025, IT trends focus on enhanced security measures and zero-trust architectures in organizations.
Adobe's prompt patching of this zero-day vulnerability underscores the necessity for users to maintain updated software, especially as cyber threats evolve.