The version of Adobe Reader installed on the remote macOS host is a version prior to 20.005.30763 or 25.001.20432. It is, therefore, affected by multiple vulnerabilities.

  - Access of Uninitialized Pointer (CWE-824) potentially leading to Arbitrary code execution (CVE-2025-27158,     CVE-2025-27162)

  - Use After Free (CWE-416) potentially leading to Arbitrary code execution (CVE-2025-27159, CVE-2025-27160,     CVE-2025-27174)

  - Out-of-bounds Read (CWE-125) potentially leading to Arbitrary code execution (CVE-2025-24431,     CVE-2025-27161)

  - Out-of-bounds Read (CWE-125) potentially leading to Memory Leak (CVE-2025-27163, CVE-2025-27164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Adobe Reader < 20.005.30763 / 25.001.20432 Multiple Vulnerabilities (APSB25-14) (macOS)

high Nessus Plugin ID 232599

Version 1.2

Version 1.1

Version 1.2 Mar 15, 2025, 2:36 AM IAVM reference STIG Severity (set to "I") Plugin Feed: 202503150236
Version 1.1 Mar 11, 2025, 9:10 PM New Plugin Feed: 202503112110