Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass. Exploitation of this issue does not require user interaction, and scope is unchanged.
References
| Link | Resource |
|---|---|
| https://helpx.adobe.com/security/products/acrobat/apsb25-85.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
15 Sep 2025, 14:20
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Adobe acrobat
Microsoft windows Adobe acrobat Dc Apple Microsoft Adobe acrobat Reader Adobe acrobat Reader Dc Adobe Apple macos |
|
| CPE | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:* |
|
| References | () https://helpx.adobe.com/security/products/acrobat/apsb25-85.html - Vendor Advisory |
09 Sep 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass. Exploitation of this issue does not require user interaction, and scope is unchanged. |
09 Sep 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-09 20:15
Updated : 2025-09-15 14:20
NVD link : CVE-2025-54255
Mitre link : CVE-2025-54255
CVE.ORG link : CVE-2025-54255
JSON object : View
Products Affected
adobe
- acrobat_reader
- acrobat_reader_dc
- acrobat_dc
- acrobat
microsoft
- windows
apple
- macos
CWE
CWE-657
Violation of Secure Design Principles