CVE Catalog

CVE-2025-64787

LowCVSS 3.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.45%

36th percentile - higher than 36% of all known CVEs

Summary

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this to bypass cryptographic protections and gain limited unauthorized write access.

Risk Assessment

Bypassing cryptographic protections may allow an attacker to make unauthorized modifications. Exploitation requires user interaction with a cryptographic signature.

Recommendation

Update Acrobat Reader to the latest version. Do not open cryptographic signatures from untrusted sources.

Other vulnerabilities in Acrobat Reader

See all
Original NVD description (English source)

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass cryptographic protections and gain limited unauthorized write access. Exploitation of this issue requires user interaction with a cryptographic signature.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS