CVE-2025-54255 Acrobat Reader | Violation of Secure Design Principles (CWE-657)

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass impacting integrity. An attacker does not have to be authenticated. Exploitation of this issue does not...

CVE-2025-54255

Adobe Acrobat Reader is affected by CVE-2025-54255 (Violation of Secure Design Principles) in versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier. The issue could bypass an integrity-related security feature and does not require authentication or user interaction; the impact is limited ...

CVE-2025-54255 Acrobat Reader | Violation of Secure Design Principles (CWE-657)

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Violation of Secure Design Principles vulnerability that could result in a security feature bypass impacting integrity. An attacker does not have to be authenticated. Exploitation of this issue does not...

CVE-2025-54257 Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2025-54257

CVE-2025-54257 affects Adobe Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier. Root cause: Use After Free vulnerability in a component handling opened files. Impact: arbitrary code execution in the context of the current user (high). Attack requires user interaction: t...

CVE-2025-54257 Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

PT-2025-36949

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 24.001.30254 and earlier Acrobat Reader version 20.005.30774 Acrobat Reader version 25.001.20672 Description: Acrobat Reader is susceptible to a security issue related to a Violation of Secure Design Principles...

APSB25-85 : Security update available for Adobe Acrobat Reader

Adobe has released a security update for Adobe Acrobat and Reader for Windows and macOS. This update addresses critical and moderate vulnerabilities. Successful exploitation could lead to arbitrary code execution and security feature bypass...

Adobe Acrobat Reader 安全漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. A security vulnerability exists in Adobe Acrobat Reader version 24.001.30254, version 20.005.30774, version 25.001.20672 and prior versions, which stems from a...

Adobe Acrobat Reader 资源管理错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. A resource management error vulnerability exists in Adobe Acrobat Reader versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier versions, which stems from th...

PT-2025-36950

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions 2020 and earlier Adobe Acrobat Reader versions 2020 and earlier Adobe Acrobat versions 24.001.30254 and earlier Adobe Acrobat Reader versions 24.001.30254 and earlier Adobe Acrobat versions 25.001.20672 and earlier Adobe...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the DiaSymReader.dll process. An attacker can execute arbitrary code by exploiting a buffer over-read condition when the application processes specially crafted input. This issue affects EOL ASP.NET 6.0.0 = 6.0.36 a...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the DiaSymReader.dll process. An attacker can execute arbitrary code by exploiting a buffer over-read condition when the application processes specially crafted input. This issue affects EOL ASP.NET 6.0.0 = 6.0.36 a...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the DiaSymReader.dll process. An attacker can execute arbitrary code by exploiting a buffer over-read condition when the application processes specially crafted input. This issue affects EOL ASP.NET 6.0.0 = 6.0.36 a...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the DiaSymReader.dll process. An attacker can execute arbitrary code by exploiting a buffer over-read condition when the application processes specially crafted input. This issue affects EOL ASP.NET 6.0.0 = 6.0.36 a...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the DiaSymReader.dll process. An attacker can execute arbitrary code by exploiting a buffer over-read condition when the application processes specially crafted input. This issue affects EOL ASP.NET 6.0.0 = 6.0.36 a...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the DiaSymReader.dll process. An attacker can execute arbitrary code by exploiting a buffer over-read condition when the application processes specially crafted input. This issue affects EOL ASP.NET 6.0.0 = 6.0.36 a...

CVE-2025-36855

A vulnerability CVE-2025-21176 https://www.cve.org/CVERecord exists in DiaSymReader.dll due to buffer over-read. Per CWE-126: Buffer Over-read https://cwe.mitre.org/data/definitions/126.html , Buffer Over-read is when a product reads from a buffer using buffer access mechanisms such as indexes or...

Vulnerability of the header_pax_extension function in the rchive_read_support_format_tar.c component: 1844:8. The Libarchive library, which allows an attacker to trigger a service denial.

Vulnerability of the headerpaxextension function in the rchivereadsupportformattar.c component: Line 1844, character 8. The Libarchive compression library is related to the swapping of a null pointer. Exploitation of this vulnerability could allow an attacker to cause service failures remotely...

AZL-73707 CVE-2025-39689 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: ftrace: Also allocate and copy hash for reading of filter files Currently the reader of setftracefilter and setftracenotrace just adds the pointer to the global tracer hash to its iterator. Unlike the writer that allocates a copy...