Product:
Acrobat Reader
Summary
Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. An attacker could modify the search path to point to a malicious program, which the application would then execute. Exploitation does not require user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-64785 |
Exploitation
To exploit this vulnerability, an attacker must manipulate the search path used by Acrobat Reader to locate critical resources. By placing a malicious program in a location that the application searches, the attacker can trick the application into executing the malicious code. This can be done without any user interaction, making it a significant risk.
Affected Products
- Acrobat Reader versions 24.001.30264 and earlier
- Acrobat Reader versions 20.005.30793 and earlier
- Acrobat Reader versions 25.001.20982 and earlier
- Acrobat Reader versions 24.001.30273 and earlier
- Acrobat Reader versions 20.005.30803 and earlier
Mitigation
To mitigate this vulnerability, users should update Acrobat Reader to the latest version provided by Adobe. Additionally, users should ensure that their system is configured to limit the execution of untrusted applications and regularly review and manage the search paths used by applications.