Acrobat Reader vulnerabilities

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerability that could result in remote code execution in the context of the current user. Exploitation requires user interaction to open a malicious file.

An Improper Certificate Validation vulnerability in Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier could result in a Security feature bypass. An attacker could leverage this to spoof the identity of a signer. Exploitation requires user interaction.

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure.