Product:
Acrobat Reader
Summary
Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to spoof the identity of a signer. Exploitation of this issue requires user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-27221 |
Exploitation
To exploit this vulnerability, an attacker must trick a user into opening a malicious document that appears to be signed by a trusted entity. This requires user interaction, as the user must open the document for the attack to succeed. Once opened, the attacker can spoof the identity of the signer, potentially leading to unauthorized actions.
Affected Products
- Acrobat Reader versions 24.001.30307 and earlier: Affected by improper certificate validation.
- Acrobat Reader versions 24.001.30308 and earlier: Vulnerable to security feature bypass.
- Acrobat Reader versions 25.001.21265 and earlier: Can be exploited to spoof signer identity.
Mitigation
To mitigate this vulnerability, users should update to the latest version of Acrobat Reader as soon as possible. Additionally, users should be cautious when opening documents from untrusted sources to avoid potential exploitation.