high7.8
CVE-2025-64785
Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability…
Impact
Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that the user needs to open a malicious file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Acrobat | from 20.001.3005 before 20.005.30838 from 24.001.20604 before 24.001.30307 from 24.001.20604 before 24.001.30308 |
| Adobe | Acrobat Dc | before 25.001.20997 |
| Adobe | Acrobat Reader | from 20.001.3005 before 20.005.30838 |
| Adobe | Acrobat Reader Dc | before 25.001.20997 |