CVE-2025-54255

4.0 mediumEPSS 0.3%

Medium (4.0) in adobe. EPSS 0.3% chance of exploitation in the next 30 days.

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass impacting integrity. An attacker does not have to be authenticated. Exploitation of this issue does not require user interaction, and scope is unchanged.

Severity

CVSS 3.1

4.0 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE: CWE-657
Published: 2025-09-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:acrobat
adobe:acrobat_dc
adobe:acrobat_reader
adobe:acrobat_reader_dc

References

https://helpx.adobe.com/security/products/acrobat/apsb25-85.html

Check your stack JSON