Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain limited unauthorized write access. Exploitation of this issue requires user interaction with a cryptographic signature.

The version of Adobe Reader installed on the remote macOS host is a version prior to 20.005.30838 or 25.001.20997. It is, therefore, affected by multiple vulnerabilities.

  - Out-of-bounds Read (CWE-125) potentially leading to Arbitrary code execution (CVE-2025-64899)

  - Untrusted Search Path (CWE-426) potentially leading to Arbitrary code execution (CVE-2025-64785)

  - Improper Verification of Cryptographic Signature (CWE-347) potentially leading to Security feature bypass     (CVE-2025-64786, CVE-2025-64787)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 20.005.30838, 24.001.30307, or 25.001.20997. It is, therefore, affected by multiple vulnerabilities.

  - Out-of-bounds Read (CWE-125) potentially leading to Arbitrary code execution (CVE-2025-64899)

  - Untrusted Search Path (CWE-426) potentially leading to Arbitrary code execution (CVE-2025-64785)

  - Improper Verification of Cryptographic Signature (CWE-347) potentially leading to Security feature bypass     (CVE-2025-64786, CVE-2025-64787)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 20.005.30838, 24.001.30307, or 25.001.20997. It is, therefore, affected by multiple vulnerabilities.

  - Out-of-bounds Read (CWE-125) potentially leading to Arbitrary code execution (CVE-2025-64899)

  - Untrusted Search Path (CWE-426) potentially leading to Arbitrary code execution (CVE-2025-64785)

  - Improper Verification of Cryptographic Signature (CWE-347) potentially leading to Security feature bypass     (CVE-2025-64786, CVE-2025-64787)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote Windows host is a version prior to 20.005.30838 or 25.001.20997. It is, therefore, affected by multiple vulnerabilities.

  - Out-of-bounds Read (CWE-125) potentially leading to Arbitrary code execution (CVE-2025-64899)

  - Untrusted Search Path (CWE-426) potentially leading to Arbitrary code execution (CVE-2025-64785)

  - Improper Verification of Cryptographic Signature (CWE-347) potentially leading to Security feature bypass     (CVE-2025-64786, CVE-2025-64787)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
277939	Adobe Reader < 20.005.30838 / 25.001.20997 Multiple Vulnerabilities (APSB25-119) (macOS)	Nessus	MacOS X Local Security Checks	Local	high
277938	Adobe Acrobat < 20.005.30838 / 24.001.30307 / 25.001.20997 Multiple Vulnerabilities (APSB25-119)	Nessus	Windows	Local	high
277937	Adobe Acrobat < 20.005.30838 / 24.001.30307 / 25.001.20997 Multiple Vulnerabilities (APSB25-119) (macOS)	Nessus	MacOS X Local Security Checks	Local	high
277936	Adobe Reader < 20.005.30838 / 25.001.20997 Multiple Vulnerabilities (APSB25-119)	Nessus	Windows	Local	high

Detections

Analytics

CVE-2025-64786

low

Tenable Plugins

high

high

high

high