Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2025-64785

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue does not require user interaction.

  • Published: Dec 9, 2025
  • Updated: Dec 10, 2025
  • CVE: CVE-2025-64785
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
adobe / acrobat 20.001.3005 20.005.30838
adobe / acrobat_dc - 25.001.20997
adobe / acrobat_reader 20.001.3005 20.005.30838
adobe / acrobat_reader_dc - 25.001.20997
adobe / acrobat 24.001.20604 24.001.30307
adobe / acrobat 24.001.20604 24.001.30308