Description
Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass impacting integrity. An attacker does not have to be authenticated. Exploitation of this issue does not require user interaction, and scope is unchanged.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Adobe | Acrobat Reader | ≤ 25.001.20672 | — |
Advisories 2
- NCSC-2025-0285 Kwetsbaarheden verholpen in Adobe Acrobat Reader NCSC-NL (Netherlands) · Sep 10, 2025
- WID-SEC-2025-2020 Adobe Acrobat und Reader: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 9, 2025
References
- https://helpx.adobe.com/security/products/acrobat/apsb25-85.html vendor-advisory