Adobe Acrobat and Reader Secure Design Principles Vulnerability Leading to Security Feature Bypass

A vulnerability has been identified in Adobe Acrobat and Reader applications for both Windows and macOS. This vulnerability, present in versions through 25.001.20672, 24.001.30254, 20.005.30774, and earlier, involves a violation of secure design principles that could allow for a security feature bypass. Notably, exploitation of this issue does not require user interaction.

Impact

Exploitation of this vulnerability could lead to a security feature bypass, allowing certain protections or restrictions within the application to be circumvented.

Remediation

Users are advised to update to the latest versions of Adobe Acrobat or Adobe Acrobat Reader. The latest versions can be downloaded from the Adobe website or via the Adobe Update mechanism. For IT administrators, updates can be deployed using preferred management tools or through direct installation.