CVE-2025-64786

Low

Description

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited unauthorized write access. Exploitation of this issue requires user interaction with a cryptographic signature.

SeverityLow

CVSS3.3

Exploit probability—

Product

Adobe Acrobat

PublishedDec 9, 2025

First seenDec 9, 2025

Weakness typeCWE-347CWE-347

How to fix

Update

adobe acrobat20.005.30838, 24.001.30307, 24.001.30308 or later
adobe acrobat_dc25.001.20997 or later
adobe acrobat_reader20.005.30838 or later
adobe acrobat_reader_dc25.001.20997 or later

Vendor advisories

helpx.adobe.com/security/products/acrobat/apsb25-119.html

Affected products

Product	Affected versions	Fixed in
adobe acrobat	20.001.3005 ≤ v < 20.005.30838, 24.001.20604 ≤ v < 24.001.30307, 24.001.20604 ≤ v < 24.001.30308	20.005.30838, 24.001.30307, 24.001.30308
adobe acrobat_dc	v < 25.001.20997	25.001.20997
adobe acrobat_reader	20.001.3005 ≤ v < 20.005.30838	20.005.30838
adobe acrobat_reader_dc	v < 25.001.20997	25.001.20997

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.