Zetlyn
GitHubGet started

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search…

cve CVE-2025-64785 1 source, 1 claim · Watch

NVD writes:
Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that the user needs to open a malicious file. the claim
Severity
HIGH NVD
CVSS
7.8 NVD
Vendor
Adobe NVD
Product
Acrobat Reader NVD
CWE
CWE-426 NVD

How far exploitation has got

  1. No public code known
  2. Proof of concept
  3. Proof of concept, verified
  4. A Metasploit module
  5. Exploited in the wild
  6. Used in ransomware campaigns

Timeline

2025-12-09first spoke of it: Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that the user needs to open a malicious file.NVD

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that the user needs to open a malicious file.

What it is to other things

affectsadobe/acrobat
NVD
affectsadobe/acrobat_dc
NVD
affectsadobe/acrobat_reader
NVD
affectsadobe/acrobat_reader_dc
NVD
affectsapple/macos
NVD
affectsmicrosoft/windows
NVD
made_byadobe
NVD
made_byapple
NVD
made_bymicrosoft
NVD
Every value, with what each source said and its receipt
PropertySourceSaidMeans here
Automatable
automatable
NVDno
At least one of those steps needs a person.
receipt
Source
NVD
Its words
no
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].automatable
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCno
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Acrobat Reader",
            "vendor": "Adobe",
            "versions": [
              {
                "lessThanOrEqual": "20.005.30803",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "62657783-CFC7-4914-8107-3569B6A32F30",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "788B5A24-7A26-481C-9AB5-63B0E1F95C22",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "577F6321-7719-4DE4-ACE0-D56FA057BB0C",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "390032F7-4C10-4F88-8EBC-71506676BBB1",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "C25C367B-6D27-4A56-9B78-3BC12D804D1E",
                "versionEndExcluding": "24.001.30307",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "2605F01C-8F46-4E51-A9AC-A50ADDD131F4",
                "versionEndExcluding": "24.001.30308",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that the user needs to open a malicious file."
      },
      {
        "lang": "es",
        "value": "Las versiones de Acrobat Reader 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 y anteriores se ven afectadas por una vulnerabilidad de ruta de búsqueda no confiable que podría permitir a los atacantes ejecutar código arbitrario en el contexto del usuario actual. Si la aplicación utiliza una ruta de búsqueda para localizar recursos críticos como programas, un atacante podría modificar esa ruta de búsqueda para que apunte a un programa malicioso, que la aplicación objetivo ejecutaría entonces. La explotación de este problema no requiere interacción del usuario."
      }
    ],
    "id": "CVE-2025-64785",
    "lastModified": "2026-09-25T23:10:00.463",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "psirt@adobe.com",
          "type": "Secondary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-64785",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-10T04:57:34.694118Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-09T21:15:58.940",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://helpx.adobe.com/security/products/acrobat/apsb25-119.html"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-426"
          }
        ],
        "source": "psirt@adobe.com",
        "type": "Secondary"
      }
    ]
  }
}
—
CVSS
cvss
NVD7.8
receipt
Source
NVD
Its words
7.8
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseScore || field:cve.metrics.cvssMetricV31[].cvssData.baseScore
Said since
2026-09-29 09:45 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Acrobat Reader",
            "vendor": "Adobe",
            "versions": [
              {
                "lessThanOrEqual": "20.005.30803",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "62657783-CFC7-4914-8107-3569B6A32F30",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "788B5A24-7A26-481C-9AB5-63B0E1F95C22",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "577F6321-7719-4DE4-ACE0-D56FA057BB0C",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "390032F7-4C10-4F88-8EBC-71506676BBB1",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "C25C367B-6D27-4A56-9B78-3BC12D804D1E",
                "versionEndExcluding": "24.001.30307",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "2605F01C-8F46-4E51-A9AC-A50ADDD131F4",
                "versionEndExcluding": "24.001.30308",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that the user needs to open a malicious file."
      },
      {
        "lang": "es",
        "value": "Las versiones de Acrobat Reader 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 y anteriores se ven afectadas por una vulnerabilidad de ruta de búsqueda no confiable que podría permitir a los atacantes ejecutar código arbitrario en el contexto del usuario actual. Si la aplicación utiliza una ruta de búsqueda para localizar recursos críticos como programas, un atacante podría modificar esa ruta de búsqueda para que apunte a un programa malicioso, que la aplicación objetivo ejecutaría entonces. La explotación de este problema no requiere interacción del usuario."
      }
    ],
    "id": "CVE-2025-64785",
    "lastModified": "2026-09-25T23:10:00.463",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "psirt@adobe.com",
          "type": "Secondary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-64785",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-10T04:57:34.694118Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-09T21:15:58.940",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://helpx.adobe.com/security/products/acrobat/apsb25-119.html"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-426"
          }
        ],
        "source": "psirt@adobe.com",
        "type": "Secondary"
      }
    ]
  }
}
—
CVSS vector
cvss_vector
NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
receipt
Source
NVD
Its words
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.vectorString || field:cve.metrics.cvssMetricV31[].cvssData.vectorString
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Acrobat Reader",
            "vendor": "Adobe",
            "versions": [
              {
                "lessThanOrEqual": "20.005.30803",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "62657783-CFC7-4914-8107-3569B6A32F30",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "788B5A24-7A26-481C-9AB5-63B0E1F95C22",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "577F6321-7719-4DE4-ACE0-D56FA057BB0C",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "390032F7-4C10-4F88-8EBC-71506676BBB1",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "C25C367B-6D27-4A56-9B78-3BC12D804D1E",
                "versionEndExcluding": "24.001.30307",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "2605F01C-8F46-4E51-A9AC-A50ADDD131F4",
                "versionEndExcluding": "24.001.30308",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that the user needs to open a malicious file."
      },
      {
        "lang": "es",
        "value": "Las versiones de Acrobat Reader 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 y anteriores se ven afectadas por una vulnerabilidad de ruta de búsqueda no confiable que podría permitir a los atacantes ejecutar código arbitrario en el contexto del usuario actual. Si la aplicación utiliza una ruta de búsqueda para localizar recursos críticos como programas, un atacante podría modificar esa ruta de búsqueda para que apunte a un programa malicioso, que la aplicación objetivo ejecutaría entonces. La explotación de este problema no requiere interacción del usuario."
      }
    ],
    "id": "CVE-2025-64785",
    "lastModified": "2026-09-25T23:10:00.463",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "psirt@adobe.com",
          "type": "Secondary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-64785",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-10T04:57:34.694118Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-09T21:15:58.940",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://helpx.adobe.com/security/products/acrobat/apsb25-119.html"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-426"
          }
        ],
        "source": "psirt@adobe.com",
        "type": "Secondary"
      }
    ]
  }
}
—
CWE
cwe
NVDCWE-426
receipt
Source
NVD
Its words
CWE-426
Read by
field:cve.weaknesses[].description[].value
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCCWE-426
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Acrobat Reader",
            "vendor": "Adobe",
            "versions": [
              {
                "lessThanOrEqual": "20.005.30803",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "62657783-CFC7-4914-8107-3569B6A32F30",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "788B5A24-7A26-481C-9AB5-63B0E1F95C22",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "577F6321-7719-4DE4-ACE0-D56FA057BB0C",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "390032F7-4C10-4F88-8EBC-71506676BBB1",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "C25C367B-6D27-4A56-9B78-3BC12D804D1E",
                "versionEndExcluding": "24.001.30307",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "2605F01C-8F46-4E51-A9AC-A50ADDD131F4",
                "versionEndExcluding": "24.001.30308",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that the user needs to open a malicious file."
      },
      {
        "lang": "es",
        "value": "Las versiones de Acrobat Reader 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 y anteriores se ven afectadas por una vulnerabilidad de ruta de búsqueda no confiable que podría permitir a los atacantes ejecutar código arbitrario en el contexto del usuario actual. Si la aplicación utiliza una ruta de búsqueda para localizar recursos críticos como programas, un atacante podría modificar esa ruta de búsqueda para que apunte a un programa malicioso, que la aplicación objetivo ejecutaría entonces. La explotación de este problema no requiere interacción del usuario."
      }
    ],
    "id": "CVE-2025-64785",
    "lastModified": "2026-09-25T23:10:00.463",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "psirt@adobe.com",
          "type": "Secondary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-64785",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-10T04:57:34.694118Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-09T21:15:58.940",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://helpx.adobe.com/security/products/acrobat/apsb25-119.html"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-426"
          }
        ],
        "source": "psirt@adobe.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Exploitation
exploitation
NVDnone
No evidence of exploitation, and no public proof of concept.
receipt
Source
NVD
Its words
none
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].exploitation
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCnone
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Acrobat Reader",
            "vendor": "Adobe",
            "versions": [
              {
                "lessThanOrEqual": "20.005.30803",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "62657783-CFC7-4914-8107-3569B6A32F30",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "788B5A24-7A26-481C-9AB5-63B0E1F95C22",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "577F6321-7719-4DE4-ACE0-D56FA057BB0C",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "390032F7-4C10-4F88-8EBC-71506676BBB1",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "C25C367B-6D27-4A56-9B78-3BC12D804D1E",
                "versionEndExcluding": "24.001.30307",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "2605F01C-8F46-4E51-A9AC-A50ADDD131F4",
                "versionEndExcluding": "24.001.30308",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that the user needs to open a malicious file."
      },
      {
        "lang": "es",
        "value": "Las versiones de Acrobat Reader 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 y anteriores se ven afectadas por una vulnerabilidad de ruta de búsqueda no confiable que podría permitir a los atacantes ejecutar código arbitrario en el contexto del usuario actual. Si la aplicación utiliza una ruta de búsqueda para localizar recursos críticos como programas, un atacante podría modificar esa ruta de búsqueda para que apunte a un programa malicioso, que la aplicación objetivo ejecutaría entonces. La explotación de este problema no requiere interacción del usuario."
      }
    ],
    "id": "CVE-2025-64785",
    "lastModified": "2026-09-25T23:10:00.463",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "psirt@adobe.com",
          "type": "Secondary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-64785",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-10T04:57:34.694118Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-09T21:15:58.940",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://helpx.adobe.com/security/products/acrobat/apsb25-119.html"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-426"
          }
        ],
        "source": "psirt@adobe.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Product
product
NVDAcrobat Reader
receipt
Source
NVD
Its words
Acrobat Reader
Read by
field:cve.affected[].affectedData[].product
Said since
2026-09-29 17:49 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-09-29 17:49 UTCAcrobat Reader
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Acrobat Reader",
            "vendor": "Adobe",
            "versions": [
              {
                "lessThanOrEqual": "20.005.30803",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "62657783-CFC7-4914-8107-3569B6A32F30",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "788B5A24-7A26-481C-9AB5-63B0E1F95C22",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "577F6321-7719-4DE4-ACE0-D56FA057BB0C",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "390032F7-4C10-4F88-8EBC-71506676BBB1",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "C25C367B-6D27-4A56-9B78-3BC12D804D1E",
                "versionEndExcluding": "24.001.30307",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "2605F01C-8F46-4E51-A9AC-A50ADDD131F4",
                "versionEndExcluding": "24.001.30308",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that the user needs to open a malicious file."
      },
      {
        "lang": "es",
        "value": "Las versiones de Acrobat Reader 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 y anteriores se ven afectadas por una vulnerabilidad de ruta de búsqueda no confiable que podría permitir a los atacantes ejecutar código arbitrario en el contexto del usuario actual. Si la aplicación utiliza una ruta de búsqueda para localizar recursos críticos como programas, un atacante podría modificar esa ruta de búsqueda para que apunte a un programa malicioso, que la aplicación objetivo ejecutaría entonces. La explotación de este problema no requiere interacción del usuario."
      }
    ],
    "id": "CVE-2025-64785",
    "lastModified": "2026-09-25T23:10:00.463",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "psirt@adobe.com",
          "type": "Secondary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-64785",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-10T04:57:34.694118Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-09T21:15:58.940",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://helpx.adobe.com/security/products/acrobat/apsb25-119.html"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-426"
          }
        ],
        "source": "psirt@adobe.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Severity
severity
NVDHIGH
From 7.0 to 8.9.
receipt
Source
NVD
Its words
HIGH
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseSeverity || field:cve.metrics.cvssMetricV31[].cvssData.baseSeverity
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCHIGH
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Acrobat Reader",
            "vendor": "Adobe",
            "versions": [
              {
                "lessThanOrEqual": "20.005.30803",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "62657783-CFC7-4914-8107-3569B6A32F30",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "788B5A24-7A26-481C-9AB5-63B0E1F95C22",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "577F6321-7719-4DE4-ACE0-D56FA057BB0C",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "390032F7-4C10-4F88-8EBC-71506676BBB1",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "C25C367B-6D27-4A56-9B78-3BC12D804D1E",
                "versionEndExcluding": "24.001.30307",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "2605F01C-8F46-4E51-A9AC-A50ADDD131F4",
                "versionEndExcluding": "24.001.30308",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that the user needs to open a malicious file."
      },
      {
        "lang": "es",
        "value": "Las versiones de Acrobat Reader 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 y anteriores se ven afectadas por una vulnerabilidad de ruta de búsqueda no confiable que podría permitir a los atacantes ejecutar código arbitrario en el contexto del usuario actual. Si la aplicación utiliza una ruta de búsqueda para localizar recursos críticos como programas, un atacante podría modificar esa ruta de búsqueda para que apunte a un programa malicioso, que la aplicación objetivo ejecutaría entonces. La explotación de este problema no requiere interacción del usuario."
      }
    ],
    "id": "CVE-2025-64785",
    "lastModified": "2026-09-25T23:10:00.463",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "psirt@adobe.com",
          "type": "Secondary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-64785",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-10T04:57:34.694118Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-09T21:15:58.940",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://helpx.adobe.com/security/products/acrobat/apsb25-119.html"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-426"
          }
        ],
        "source": "psirt@adobe.com",
        "type": "Secondary"
      }
    ]
  }
}
high
Status
status
NVDAnalyzed
receipt
Source
NVD
Its words
Analyzed
Read by
field:cve.vulnStatus
Said since
2026-09-29 09:45 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Acrobat Reader",
            "vendor": "Adobe",
            "versions": [
              {
                "lessThanOrEqual": "20.005.30803",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "62657783-CFC7-4914-8107-3569B6A32F30",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "788B5A24-7A26-481C-9AB5-63B0E1F95C22",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "577F6321-7719-4DE4-ACE0-D56FA057BB0C",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "390032F7-4C10-4F88-8EBC-71506676BBB1",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "C25C367B-6D27-4A56-9B78-3BC12D804D1E",
                "versionEndExcluding": "24.001.30307",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "2605F01C-8F46-4E51-A9AC-A50ADDD131F4",
                "versionEndExcluding": "24.001.30308",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that the user needs to open a malicious file."
      },
      {
        "lang": "es",
        "value": "Las versiones de Acrobat Reader 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 y anteriores se ven afectadas por una vulnerabilidad de ruta de búsqueda no confiable que podría permitir a los atacantes ejecutar código arbitrario en el contexto del usuario actual. Si la aplicación utiliza una ruta de búsqueda para localizar recursos críticos como programas, un atacante podría modificar esa ruta de búsqueda para que apunte a un programa malicioso, que la aplicación objetivo ejecutaría entonces. La explotación de este problema no requiere interacción del usuario."
      }
    ],
    "id": "CVE-2025-64785",
    "lastModified": "2026-09-25T23:10:00.463",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "psirt@adobe.com",
          "type": "Secondary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-64785",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-10T04:57:34.694118Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-09T21:15:58.940",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://helpx.adobe.com/security/products/acrobat/apsb25-119.html"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-426"
          }
        ],
        "source": "psirt@adobe.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Technical impact
technical_impact
NVDtotal
The attacker gains full control of the component, or all of its information.
receipt
Source
NVD
Its words
total
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].technicalImpact
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCtotal
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Acrobat Reader",
            "vendor": "Adobe",
            "versions": [
              {
                "lessThanOrEqual": "20.005.30803",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "62657783-CFC7-4914-8107-3569B6A32F30",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "788B5A24-7A26-481C-9AB5-63B0E1F95C22",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "577F6321-7719-4DE4-ACE0-D56FA057BB0C",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "390032F7-4C10-4F88-8EBC-71506676BBB1",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "C25C367B-6D27-4A56-9B78-3BC12D804D1E",
                "versionEndExcluding": "24.001.30307",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "2605F01C-8F46-4E51-A9AC-A50ADDD131F4",
                "versionEndExcluding": "24.001.30308",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that the user needs to open a malicious file."
      },
      {
        "lang": "es",
        "value": "Las versiones de Acrobat Reader 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 y anteriores se ven afectadas por una vulnerabilidad de ruta de búsqueda no confiable que podría permitir a los atacantes ejecutar código arbitrario en el contexto del usuario actual. Si la aplicación utiliza una ruta de búsqueda para localizar recursos críticos como programas, un atacante podría modificar esa ruta de búsqueda para que apunte a un programa malicioso, que la aplicación objetivo ejecutaría entonces. La explotación de este problema no requiere interacción del usuario."
      }
    ],
    "id": "CVE-2025-64785",
    "lastModified": "2026-09-25T23:10:00.463",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "psirt@adobe.com",
          "type": "Secondary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-64785",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-10T04:57:34.694118Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-09T21:15:58.940",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://helpx.adobe.com/security/products/acrobat/apsb25-119.html"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-426"
          }
        ],
        "source": "psirt@adobe.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Vendor
vendor
NVDAdobe
receipt
Source
NVD
Its words
Adobe
Read by
field:cve.affected[].affectedData[].vendor
Said since
2026-09-29 17:49 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-09-29 17:49 UTCAdobe
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Acrobat Reader",
            "vendor": "Adobe",
            "versions": [
              {
                "lessThanOrEqual": "20.005.30803",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "62657783-CFC7-4914-8107-3569B6A32F30",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "788B5A24-7A26-481C-9AB5-63B0E1F95C22",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "577F6321-7719-4DE4-ACE0-D56FA057BB0C",
                "versionEndExcluding": "20.005.30838",
                "versionStartIncluding": "20.001.3005",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
                "matchCriteriaId": "390032F7-4C10-4F88-8EBC-71506676BBB1",
                "versionEndExcluding": "25.001.20997",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "C25C367B-6D27-4A56-9B78-3BC12D804D1E",
                "versionEndExcluding": "24.001.30307",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      },
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
                "matchCriteriaId": "2605F01C-8F46-4E51-A9AC-A50ADDD131F4",
                "versionEndExcluding": "24.001.30308",
                "versionStartIncluding": "24.001.20604",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that the user needs to open a malicious file."
      },
      {
        "lang": "es",
        "value": "Las versiones de Acrobat Reader 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 y anteriores se ven afectadas por una vulnerabilidad de ruta de búsqueda no confiable que podría permitir a los atacantes ejecutar código arbitrario en el contexto del usuario actual. Si la aplicación utiliza una ruta de búsqueda para localizar recursos críticos como programas, un atacante podría modificar esa ruta de búsqueda para que apunte a un programa malicioso, que la aplicación objetivo ejecutaría entonces. La explotación de este problema no requiere interacción del usuario."
      }
    ],
    "id": "CVE-2025-64785",
    "lastModified": "2026-09-25T23:10:00.463",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "psirt@adobe.com",
          "type": "Secondary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-64785",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-12-10T04:57:34.694118Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-12-09T21:15:58.940",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://helpx.adobe.com/security/products/acrobat/apsb25-119.html"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-426"
          }
        ],
        "source": "psirt@adobe.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Every claim, by kind

vulnerability

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that the user needs to open a malicious file.
zetlyn/cve-nvd · 2025-12-09
automatable no cvss 7.8 cvss_vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H cwe CWE-426 exploitation none product Acrobat Reader severity HIGH status Analyzed technical_impact total vendor Adobe source