VYPR
← All advisories
Low severity3.3NVD Advisory· Published Dec 9, 2025· Updated Apr 28, 2026

CVE-2025-64786

CVE-2025-64786

Description

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited unauthorized write access. Exploitation of this issue requires user interaction with a cryptographic signature.

Affected products

5
  • Adobe Inc./Acrobat4 versions
    cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*+ 3 more
    • cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*range: >=20.001.3005,<20.005.30838
    • cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*range: <25.001.20997
    • cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*range: >=20.001.3005,<20.005.30838
    • (no CPE)range: <=25.001.20982, 24.001.30273, 20.005.30803
  • Adobe Inc./Acrobat Reader Dc
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
    Range: <25.001.20997

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.