Protection Mechanism Failure in Adobe Reader and Adobe Acrobat - CVE-2025-54255
Published: September 9, 2025
Vulnerability identifier: #VU115038
CSH Severity: Low
CVSS v4: 2.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-54255
CWE-ID: CWE-693
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an attacker to bypass implemented security restrictions.
The vulnerability exists due to insufficient implementation of security measures. An attacker with physical access to the system can bypass implemented security restrictions.
Affected software
Adobe Reader
Adobe Acrobat
Adobe Acrobat
How to mitigate CVE-2025-54255
Install updates from vendor's website.
Adobe Reader - addressed in versions 20.005.30791, 20.005.30793, 25.001.20693
Adobe Acrobat - addressed in versions 20.005.30791, 20.005.30793, 24.001.30264, 25.001.20693
Adobe Acrobat - addressed in versions 20.005.30791, 20.005.30793, 24.001.30264, 25.001.20693