Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue does not require user interaction.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Adobe |
|
No data.
No data.
References
History
Wed, 10 Dec 2025 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Adobe
Adobe acrobat Reader |
|
| Vendors & Products |
Adobe
Adobe acrobat Reader |
Tue, 09 Dec 2025 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue does not require user interaction. | |
| Title | Acrobat Reader | Untrusted Search Path (CWE-426) | |
| Weaknesses | CWE-426 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: adobe
Published: 2025-12-09T20:21:05.355Z
Updated: 2025-12-10T04:57:33.956Z
Reserved: 2025-11-11T22:48:38.823Z
Link: CVE-2025-64785
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-12-09T21:15:58.940
Modified: 2025-12-09T21:15:58.940
Link: CVE-2025-64785
Redhat
No data.