Product:
Acrobat Reader
Summary
Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass cryptographic protections and gain limited unauthorized write access. Exploitation of this issue does not require user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.3 | CVE-2025-64787 |
Exploitation
To exploit this vulnerability, an attacker can craft a malicious file that takes advantage of the improper verification of cryptographic signatures. By executing this file on a vulnerable version of Acrobat Reader, the attacker can bypass security features and gain unauthorized write access without needing any user interaction.
Affected Products
- Acrobat Reader 24.001.30264 and earlier
- Acrobat Reader 20.005.30793 and earlier
- Acrobat Reader 25.001.20982 and earlier
- Acrobat Reader 24.001.30273 and earlier
- Acrobat Reader 20.005.30803 and earlier
Mitigation
To mitigate this vulnerability, users should update their Acrobat Reader to the latest version available from Adobe. Regularly checking for updates and applying them promptly can help protect against potential exploitation of this and other vulnerabilities.