PT-2025-50224 · Adobe · Acrobat Reader

Published 2025-12-09 · Updated 2026-04-28 · CVE-2025-64785

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 20.005.30793 through 20.005.30803 Acrobat Reader versions 24.001.30264 through 24.001.30273 Acrobat Reader version 25.001.20982

Description Acrobat Reader is susceptible to an Untrusted Search Path issue. This could allow attackers to execute arbitrary code with the privileges of the current user. The issue arises when the application uses a search path to locate essential resources. An attacker could manipulate this search path to direct the application to execute a malicious program. User interaction is not needed for exploitation.

Recommendations Update Acrobat Reader to a version later than 20.005.30803. Update Acrobat Reader to a version later than 24.001.30273. Update Acrobat Reader to a version later than 25.001.20982.

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

BDU:2025-15993

CVE-2025-64785

Affected Products

Acrobat Reader

References · 9

• https://safe-surf.ru/specialists/bulletins-nkcki/727064 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-64785 · Security Note
• https://bdu.fstec.ru/vul/2025-15993 · Security Note
• https://osv.dev/vulnerability/CVE-2025-64785 · Vendor Advisory
• https://helpx.adobe.com/security/products/acrobat/apsb25-119.html · Vendor Advisory
• https://twitter.com/CVEnew/status/1998732815488479655 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64785 · Note
• https://twitter.com/VulmonFeeds/status/1998597571351019740 · Twitter Post
• https://t.me/cveNotify/161189 · Telegram Post