Product:
Acrobat Reader
Summary
Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass. Exploitation of this issue does not require user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4 | CVE-2025-54255 |
Exploitation
The vulnerability can be exploited locally without any user interaction. An attacker can leverage this flaw to bypass security features within the affected versions of Acrobat Reader, potentially leading to unauthorized access or manipulation of sensitive data.
Affected Products
- Acrobat Reader 24.001.30254 and earlier: Affected by a security feature bypass vulnerability.
- Acrobat Reader 20.005.30774 and earlier: Vulnerable to exploitation without user interaction.
- Acrobat Reader 25.001.20672 and earlier: Subject to a violation of secure design principles.
Mitigation
To mitigate this vulnerability, users should update to the latest version of Acrobat Reader as soon as possible. Regularly applying security updates can help protect against known vulnerabilities and reduce the risk of exploitation.