Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited unauthorized write access. Exploitation of this issue does not require user interaction.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Adobe |
|
No data.
No data.
References
History
Wed, 10 Dec 2025 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Adobe
Adobe acrobat Reader |
|
| Vendors & Products |
Adobe
Adobe acrobat Reader |
Tue, 09 Dec 2025 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited unauthorized write access. Exploitation of this issue does not require user interaction. | |
| Title | Acrobat Reader | Improper Verification of Cryptographic Signature (CWE-347) | |
| Weaknesses | CWE-347 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: adobe
Published: 2025-12-09T20:21:04.388Z
Updated: 2025-12-09T20:21:04.388Z
Reserved: 2025-11-11T22:48:38.823Z
Link: CVE-2025-64786
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-12-09T21:15:59.133
Modified: 2025-12-09T21:15:59.133
Link: CVE-2025-64786
Redhat
No data.