An independent security research firm is warning of a non-ingenious JavaScript buffer overflow ploy that modern Web browsers would probably filter out, but which impacts recent versions of Adobe ...

In late March 2026, Adobe disclosed a high-severity prototype pollution vulnerability in Adobe Acrobat Reader, tracked as CVE‑2026‑34621, which affects the application's JavaScript engine used to ...

In July 2022, Adobe released a security update for vulnerabilities in Adobe Acrobat and Reader. The update fixed a vulnerability that is identified as CVE-2022-34233 discovered by Zscaler’s ThreatLabz ...

因為許多惡意PDF檔案依賴PDF檔案中的JavaScript程式進行攻擊，因此停用Acrobat/Reader的JavaScript功能可以提昇系統安全。 但如果停用JavaScript，Acrobat/Reader將無法執行部分填表、流程等功能，因此Adobe允許使用者把信任的文件加入白名單中，僅在信任的文件中啟用JavaScript功能。

Security researchers found 134 vulnerabilities in the way apps such as Adobe Acrobat and Microsoft Word handle JavaScript. Experts developed a tool to help them with the task and called it Cooper, in ...