4
CVE-2025-54255
- EPSS 0.27%
- Veröffentlicht 09.09.2025 20:10:02
- Zuletzt bearbeitet 02.10.2025 14:43:43
- Erkennungen
Acrobat Reader | Violation of Secure Design Principles (CWE-657)
Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass impacting integrity. An attacker does not have to be authenticated. Exploitation of this issue does not require user interaction, and scope is unchanged.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Acrobat Dc SwEdition continuous Version >= 15.008.20082 < 25.001.20693
Adobe ≫ Acrobat Reader Dc SwEdition continuous Version >= 15.008.20082 < 25.001.20693
Adobe ≫ Acrobat Reader SwEdition classic Version >= 20.001.30002 < 20.005.30791
Adobe ≫ Acrobat Reader SwEdition classic Version >= 20.001.30002 < 20.005.30791
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.27% | 0.186 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4 | 2.5 | 1.4 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
|
| Adobe | 4 | 2.5 | 1.4 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
|
CWE-657 Violation of Secure Design Principles
The product violates well-established principles for secure design.
https://helpx.adobe.com/security/products/acrobat/apsb25-85.html