EUVD-2026-37291

🗓️ 16 Jun 2026 20:12:02Reported by EUVDType

Adobe Acrobat PDF Extension (Chrome) versions 26.5.2.2 and earlier are affected by a UXSS-class cross-origin data disclosure vulnerability. An attacker could exploit this vulnerability to gain access to data regarding the victim's session. Exploit...

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2026-48294	16 Jun 202620:12	–	cve
Cvelist	CVE-2026-48294	16 Jun 202620:12	–	cvelist
Positive Technologies	PT-2026-50077	16 Jun 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-48294	16 Jun 202620:12	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "b72db7b2-6912-3bee-9c24-1183b5659b7f",
        "vendor": {
          "name": "Adobe"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "8b5e74b6-762d-3569-b2f4-09fff746a1b9",
        "product": {
          "name": "Adobe Acrobat PDF Extension (Chrome)",
          "vendor": {
            "name": "Adobe"
          }
        },
        "product_version": "0 ≤26.5.2.2"
      }
    ]
  }
]

Source	Link
chromewebstore	www.chromewebstore.google.com/detail/adobe-acrobat-pdf-edit-co/efaidnbmnnnibpcajpcglclefindmkaj

16 Jun 2026 20:59Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.17.4

SSVC