CVE-2025-43579

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an Information Exposure vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain unauthorized access to sensitive information. Exploitation of this issue does not require user interaction.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - psirt@adobe.com

Published

2025-06-10

Last modified

2025-06-10

Weaknesses

CWE-200

Affected products

• Acrobat (Adobe)
• Acrobat Dc (Adobe)
• Acrobat Reader (Adobe)
• Acrobat Reader Dc (Adobe)

References

• https://helpx.adobe.com/security/products/acrobat/apsb25-57.html