Use After Free Vulnerability in Adobe Acrobat Reader
CVE-2025-27174

7.8HIGH

Key Information:

Vendor

Adobe
Status
Acrobat Reader
Vendor
CVE Published:
11 March 2025

What is CVE-2025-27174?

The Use After Free vulnerability in Adobe Acrobat Reader affects several versions of the software, allowing potential attackers to execute arbitrary code within the context of the user's session. This exploitation requires user interaction, specifically that the targeted user opens a malicious PDF file. It is crucial for users to ensure their Acrobat Reader is updated to the latest version to mitigate the risks associated with this vulnerability.

Affected Version(s)

Acrobat Reader 0 <= 25.001.20428

References

https://helpx.adobe.com/security/products/acrobat/apsb25-...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-27174 : Use After Free Vulnerability in Adobe Acrobat Reader