Acrobat for Edge is vulnerable to an out‑of‑bounds read that can expose sensitive data from memory. An attacker can trigger this by directing a user to a maliciously crafted URL or a compromised web page, allowing the attacker to read protected information from the victim’s process space.

Adobe Acrobat for Edge is affected. No specific version details are listed in the public advisory.

The CVSS score of 4.3 indicates a moderate severity, and the vulnerability is not listed as a known exploited vulnerability by CISA. Exploitation requires user interaction—an attacker must lure a victim into visiting a malicious site. Because the attack vector is user‑initiated and grants only read access, the impact is limited to potential data leakage rather than full system compromise.