4

CVE-2025-54255

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass impacting integrity. An attacker does not have to be authenticated. Exploitation of this issue does not require user interaction, and scope is unchanged.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Acrobat SwEditionclassic Version >= 24.0.0 < 24.001.30264
   Apple ≫ macOS Version-
   Microsoft ≫ Windows Version-
Adobe ≫ Acrobat Dc SwEditioncontinuous Version >= 15.008.20082 < 25.001.20693
   Apple ≫ macOS Version-
   Microsoft ≫ Windows Version-
Adobe ≫ Acrobat Reader Dc SwEditioncontinuous Version >= 15.008.20082 < 25.001.20693
   Apple ≫ macOS Version-
   Microsoft ≫ Windows Version-
Adobe ≫ Acrobat SwEditionclassic Version >= 20.001.30002 < 20.005.30793
   Microsoft ≫ Windows Version-
Adobe ≫ Acrobat Reader SwEditionclassic Version >= 20.001.30002 < 20.005.30791
   Microsoft ≫ Windows Version-
Adobe ≫ Acrobat SwEditionclassic Version >= 20.001.30002 < 20.005.30791
   Apple ≫ macOS Version-
Adobe ≫ Acrobat Reader SwEditionclassic Version >= 20.001.30002 < 20.005.30791
   Apple ≫ macOS Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.152
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4 2.5 1.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
psirt@adobe.com 4 2.5 1.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CWE-657 Violation of Secure Design Principles

The product violates well-established principles for secure design.