CVEvulnerability

CVE-2025-54255

4.0 MEDIUM Published 2025-09-09 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-09-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
4.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-657

Description

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass impacting integrity. An attacker does not have to be authenticated. Exploitation of this issue does not require user interaction, and scope is unchanged.

Affected configurations

• adobe acrobat (>= 24.0.0 < 24.001.30264) • adobe acrobat dc (>= 15.008.20082 < 25.001.20693) • adobe acrobat reader dc (>= 15.008.20082 < 25.001.20693) • adobe acrobat (>= 20.001.30002 < 20.005.30793) • adobe acrobat reader (>= 20.001.30002 < 20.005.30791) • adobe acrobat (>= 20.001.30002 < 20.005.30791)

Related

Weakness · CWE (1)

  • CWE-657 Violation of Secure Design Principles weakness

References