ZeroHour

CVE-2025-54255

CVSS 3.1
4.0 medium
EPSS
<1%p19
Published
()
Modified
Description

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass impacting integrity. An attacker does not have to be authenticated. Exploitation of this issue does not require user interaction, and scope is unchanged.

Vendors
adobe
Products
acrobat, acrobat dc, acrobat reader dc, acrobat reader
Weakness
CWE-657
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

In the news

No ingested article mentions this CVE yet.