Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass. Exploitation of this issue does not require user interaction, and scope is unchanged.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://helpx.adobe.com/security/products/acrobat/apsb25-85.html cve-icon cve-icon
History

Tue, 09 Sep 2025 23:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 09 Sep 2025 20:30:00 +0000

Type Values Removed Values Added
Description Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass. Exploitation of this issue does not require user interaction. Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass. Exploitation of this issue does not require user interaction, and scope is unchanged.

Tue, 09 Sep 2025 20:15:00 +0000

Type Values Removed Values Added
Description Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass. Exploitation of this issue does not require user interaction.
Title Acrobat Reader | Violation of Secure Design Principles (CWE-657)
Weaknesses CWE-657
References
Metrics cvssV3_1

{'score': 4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published: 2025-09-09T20:10:02.351Z

Updated: 2025-09-09T20:17:18.139Z

Reserved: 2025-07-17T21:15:02.455Z

Link: CVE-2025-54255

cve-icon Vulnrichment

Updated: 2025-09-09T20:17:11.967Z

cve-icon NVD

Status : Received

Published: 2025-09-09T20:15:44.357

Modified: 2025-09-09T21:15:38.033

Link: CVE-2025-54255

cve-icon Redhat

No data.