Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass impacting integrity. An attacker does not have to be authenticated. Exploitation of this issue does not require user interaction, and scope is unchanged.
Weakness
The product violates well-established principles for secure design.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Acrobat | Adobe | 24.0.0 (including) | 24.001.30264 (excluding) |
| Acrobat_dc | Adobe | 15.008.20082 (including) | 25.001.20693 (excluding) |
| Acrobat_reader_dc | Adobe | 15.008.20082 (including) | 25.001.20693 (excluding) |