CVE-2025-64786

published 2025-12-09

CVE-2025-64786: Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of…

Priority P4 14 low 3.3 CVSS 3.1

AV L AC L PR N UI R S U C N I L A N

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited unauthorized write access. Exploitation of this issue requires user interaction with a cryptographic signature.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
adobe	acrobat	>= 20.001.3005 < 20.005.30838	20.005.30838
adobe	acrobat	>= 24.001.20604 < 24.001.30307	24.001.30307
adobe	acrobat	>= 24.001.20604 < 24.001.30308	24.001.30308
adobe	acrobat_dc	< 25.001.20997	25.001.20997
adobe	acrobat_reader	<= 20.005.30803	—
adobe	acrobat_reader	>= 20.001.3005 < 20.005.30838	20.005.30838
adobe	acrobat_reader_dc	< 25.001.20997	25.001.20997

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-347