NetSight
high7.8

CVE-2025-54257

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code…

Impact

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file, and scope is unchanged.

Affected products

VendorProductAffected versions
AdobeAcrobat
from 24.0.0 before 24.001.30264
from 20.001.30002 before 20.005.30793
from 20.001.30002 before 20.005.30791
AdobeAcrobat Dc
from 15.008.20082 before 25.001.20693
AdobeAcrobat Reader Dc
from 15.008.20082 before 25.001.20693
AdobeAcrobat Reader
from 20.001.30002 before 20.005.30791

Weakness classification

References