{"timestamp":"2025-12-12T17:10:22.855615Z","id":"CVE-2025-64786","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Adobe","product":"Acrobat Reader","defaultStatus":"affected","versions":[{"version":"0","lessThanOrEqual":"20.005.30803","versionType":"semver","status":"affected"}]}]

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited unauthorized write access. Exploitation of this issue does not require user interaction.

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited unauthorized write access. Exploitation of this issue requires user interaction with a cryptographic signature.

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AND
     OR
          *cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* versions from (including) 24.001.20604 up to (excluding) 24.001.30307
     OR
          cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* versions from (including) 24.001.20604 up to (excluding) 24.001.30308
     OR
          cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

OR
          *cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* versions up to (excluding) 25.001.20997
          *cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* versions up to (excluding) 25.001.20997
          *cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* versions from (including) 20.001.3005 up to (excluding) 20.005.30838
          *cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:* versions from (including) 20.001.3005 up to (excluding) 20.005.30838

Adobe Systems Incorporated: https://helpx.adobe.com/security/products/acrobat/apsb25-119.html Types: Vendor Advisory

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited unauthorized write access. Exploitation of this issue does not require user interaction.

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CWE-347

https://helpx.adobe.com/security/products/acrobat/apsb25-119.html