← Back

CVE-2025-64786

nvd nist
Published: Dec 9, 2025Modified: Jun 17, 2026

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Exploitability: 1.8 / Impact: 1.4
Source: NVD

Description

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited unauthorized write access. Exploitation of this issue requires user interaction with a cryptographic signature.

Affected (6)

Adobe
4 products
Acrobat
Acrobat Dc
Acrobat Reader
Acrobat Reader Dc
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Acrobat
From 20.001.3005 to 20.005.30838
Acrobat Dc
Before 25.001.20997
Acrobat Reader
From 20.001.3005 to 20.005.30838
Acrobat Reader Dc
Before 25.001.20997
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Acrobat
From 24.001.20604 to 24.001.30307
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Acrobat
From 24.001.20604 to 24.001.30308
Running on/withPlatform Versions
Apple
Macos
All versions

Related CWEs

CWE-347
Improper Verification of Cryptographic Signature
The product does not verify, or incorrectly verifies, the cryptographic signature for data.

References (1)

Source: psirt@adobe.com
Vendor Advisory

Timeline

No history available yet.