Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
2025-06-10T19:15:32.570
2025-06-27T15:14:57.577
Analyzed
CVSSv3.1: 7.8 (HIGH)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | adobe | acrobat_dc | < 25.001.20531 | Yes |
Application | adobe | acrobat_reader_dc | < 25.001.20531 | Yes |
Operating System | microsoft | windows | - | No |
Application | adobe | acrobat_dc | < 25.001.20529 | Yes |
Application | adobe | acrobat_reader_dc | < 25.001.20529 | Yes |
Operating System | apple | macos | - | No |
Application | adobe | acrobat | < 20.005.30774 | Yes |
Application | adobe | acrobat | < 24.001.30254 | Yes |
Application | adobe | acrobat_reader | < 20.005.30774 | Yes |
Operating System | apple | macos | - | No |
Operating System | microsoft | windows | - | No |