Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier contain an improper verification of cryptographic signature flaw (CWE‑347). The flaw allows a signed document to be tampered with, bypassing Adobe’s integrity checks. An attacker who convinces a user to open a maliciously signed PDF can gain limited unauthorized write access, potentially altering configuration files or inserting malware.

The vulnerability impacts Adobe Acrobat Reader and its related products, including Acrobat, Acrobat DC, Reader classic and Reader DC on both macOS and Windows. The affected versions are 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and any earlier releases.

The CVSS score of 3.3 classifies the issue as low severity, while the EPSS score of less than 1% reflects a very low likelihood of exploitation. The attack requires user interaction with a signed document, making social engineering or targeted delivery of a malicious PDF necessary. The vulnerability is not in the CISA KEV catalog, so no widespread active exploitation has been reported, but the possibility of gaining write privileges warrants prompt remediation for high‑value environments.