CVE-2025-54255

MEDIUM4.0

Acrobat Reader | Violation of Secure Design Principles (CWE-657)

Published Sep 9, 2025

Modified 5 months ago

Details

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass impacting integrity. An attacker does not have to be authenticated. Exploitation of this issue does not require user interaction, and scope is unchanged.

Affected Packages

Adobe Acrobat Reader

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1809) / Server 2019Windows 10 (1903)Windows 10 (1909)

References

ADVISORY

https://helpx.adobe.com/security/products/acrobat/apsb25-85.html

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-54255

CVSS Analysis

CVSS v3.1

4.0

Exploitability