Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-27158

Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Published

2025-03-11T18:15:33.540

Last Modified

2025-04-28T16:48:57.070

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses

Type: Primary
CWE-824

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	adobe	acrobat	< 20.005.30763	Yes
Application	adobe	acrobat	< 24.001.30235	Yes
Application	adobe	acrobat_dc	< 25.001.20432	Yes
Application	adobe	acrobat_reader	< 20.005.30763	Yes
Application	adobe	acrobat_reader_dc	< 25.001.20432	Yes
Operating System	apple	macos	-	No
Operating System	microsoft	windows	-	No

References

https://helpx.adobe.com/security/products/acrobat/apsb25-14.html Vendor Advisory ([email protected])
https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2135 Technical Description, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)