CVE-2025-54255

Acrobat Reader | Violation of Secure Design Principles (CWE-657)

Description

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass impacting integrity. An attacker does not have to be authenticated. Exploitation of this issue does not require user interaction, and scope is unchanged.

Scores

Weaknesses (CWE)

• CWE-657

European references

• ENISA EUVD · EUVD-2025-27463
• GCVE · GCVE-0-2025-54255

CERT-FR advisories

• CERTFR-2025-AVI-0770 — Multiples vulnérabilités dans les produits Adobe · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

• cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* ≥ 24.0.0 < 24.001.30264
• cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 < 25.001.20693
• cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 < 25.001.20693
• cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* ≥ 20.001.30002 < 20.005.30793
• cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:* ≥ 20.001.30002 < 20.005.30791
• cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* ≥ 20.001.30002 < 20.005.30791
• cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:* ≥ 20.001.30002 < 20.005.30791

Affected products

References

• https://helpx.adobe.com/security/products/acrobat/apsb25-85.html

Sources