Skip to content
OpenAdvisories
Medium WID-SEC-2025-2801 4 CVEs

Adobe Acrobat und Reader: Mehrere Schwachstellen

Published Dec 9, 2025 · Updated Dec 9, 2025 · de-DE

Vendor: Adobe Product: Acrobat Product: Acrobat DC Product: Acrobat Reader Product: Acrobat Reader DC Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe Acrobat, Adobe Acrobat DC, Adobe Acrobat Reader DC und Adobe Acrobat Reader ausnutzen, um beliebigen Programmcode auszuführen oder Sicherheitsmaßnahmen zu umgehen.

Product

Adobe Acrobat ist ein Programm für die Erstellung und Betrachtung von Dokumenten im Portable Document Format (PDF).
Acrobat Reader ist ein Programm für die Anzeige von Dokumenten im Portable Document Format (PDF).
Adobe Reader ist ein Programm für die Anzeige von Dokumenten im Portable Document Format (PDF).

Vulnerabilities 4

  • High 7.8
    CVE-2025-64785

    Acrobat Reader | Untrusted Search Path (CWE-426)

    Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the app…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2025-64899

    Acrobat Reader | Out-of-bounds Read (CWE-125)

    Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structur…

    Adobe Acrobat Reader
  • Low 3.3
    CVE-2025-64786

    Acrobat Reader | Improper Verification of Cryptographic Signature (CWE-347)

    Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could levera…

    Adobe Acrobat Reader
  • Low 3.3
    CVE-2025-64787

    Acrobat Reader | Improper Verification of Cryptographic Signature (CWE-347)

    Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could levera…

    Adobe Acrobat Reader

Revision history

  1. #1

    Initiale Fassung

References