Netskope Threat Labs

FILE-PDF Adobe Acrobat Reader out-of-bounds write attempt detected

IPS-CFWIPS-SWG

3 SIDs: 152158, 152159, 152161

First seen
September 2026
Last seen
October 2026

Detects PDFs exploiting CVE-2026-81979, CVE-2026-81981, and CVE-2026-81983, out-of-bounds write vulnerabilities in Adobe Acrobat Reader that can allow code execution. The rule matches the crafted stream structures that public exploits use to write beyond allocated buffers.