Skip to content
OpenAdvisories
High NCSC-2025-0084 6 CVEs

Kwetsbaarheden verholpen in Adobe Acrobat Reader

Published Mar 12, 2025 · Updated Mar 12, 2025 · nl

Summary

Adobe heeft kwetsbaarheden verholpen in Adobe Acrobat Reader.

Details

Interpretaties
De kwetsbaarheden stellen een aanvaller in staat om willekeurige code uit te voeren op de getroffen systemen.De kwetsbaarheden omvatten onder andere een out-of-bounds read en een Use After Free, die beide vereisen dat de gebruiker interactie heeft door een kwaadaardig bestand te openen. Dit kan leiden tot ongeautoriseerde toegang en controle over het systeem.

Oplossingen
Adobe heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 6

  • High 7.8
    CVE-2025-27158

    Acrobat Reader | Access of Uninitialized Pointer (CWE-824)

    Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2025-27159

    Acrobat Reader | Use After Free (CWE-416)

    Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction …

    Adobe Acrobat Reader
  • High 7.8
    CVE-2025-27160

    Acrobat Reader | Use After Free (CWE-416)

    Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction …

    Adobe Acrobat Reader
  • High 7.8
    CVE-2025-27161

    Acrobat Reader | Out-of-bounds Read (CWE-125)

    Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverag…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2025-27162

    Acrobat Reader | Access of Uninitialized Pointer (CWE-824)

    Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2025-27174

    Acrobat Reader | Use After Free (CWE-416)

    Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction …

    Adobe Acrobat Reader

Revision history

  1. #1.0.0

    Initiele versie

References