{"id":"CVE-2025-64787","aliases":["EUVD-2025-202309","GHSA-636h-73hj-chgr"],"status":"published","title":"Acrobat Reader | Improper Verification of Cryptographic Signature (CWE-347)","description":"Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass cryptographic protections and gain limited unauthorized write access. Exploitation of this issue requires user interaction with a cryptographic signature.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00477,"percentile":0.41442,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-347"],"published":"2025-12-09T20:21:03Z","modified":"2026-09-25T23:10:00Z","products":[{"vendor":"adobe","product":"acrobat"},{"vendor":"adobe","product":"acrobat reader"},{"vendor":"adobe","product":"acrobat_dc"},{"vendor":"adobe","product":"acrobat_reader"},{"vendor":"adobe","product":"acrobat_reader_dc"}],"references":[{"url":"https://helpx.adobe.com/security/products/acrobat/apsb25-119.html","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-64787"},{"url":"https://github.com/advisories/GHSA-636h-73hj-chgr"}],"sources":{"cve":[{"id":"CVE-2025-64787","title":"Acrobat Reader | Improper Verification of Cryptographic Signature (CWE-347)","description":"Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass cryptographic protections and gain limited unauthorized write access. Exploitation of this issue requires user interaction with a cryptographic signature.","status":"published","published":"2025-12-09T20:21:03.344Z","modified":"2026-04-28T02:23:40.01Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:32:46.750177Z"}],"euvd":[{"id":"EUVD-2025-202309","description":"Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass cryptographic protections and gain limited unauthorized write access. Exploitation of this issue requires user interaction with a cryptographic signature.","status":"published","published":"2025-12-09T20:21:03Z","modified":"2026-04-28T02:23:40Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T19:24:16.972131Z"}],"ghsa":[{"id":"GHSA-636h-73hj-chgr","title":"Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and...","description":"Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass cryptographic protections and gain limited unauthorized write access. Exploitation of this issue does not require user interaction.","status":"published","published":"2025-12-09T21:31:49Z","modified":"2025-12-09T21:31:56Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T15:05:07.56832Z"}],"nvd":[{"id":"CVE-2025-64787","description":"Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass cryptographic protections and gain limited unauthorized write access. Exploitation of this issue requires user interaction with a cryptographic signature.","status":"published","published":"2025-12-09T21:15:59.337Z","modified":"2026-09-25T23:10:00.463Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:11:49.468427Z"}]}}