CVE-2025-27159

Summary

CVE-2025-27159 is a Use After Free vulnerability that affects Acrobat Reader versions 24.001.30225, 20.005.30748, and 25.001.20428, and earlier. This issue could lead to arbitrary code execution in the context of the current user. The vulnerability is triggered when Acrobat Reader fails to properly manage memory during the processing of a malicious file, resulting in a Use After Free condition. Successful exploitation requires user interaction, as the victim must open the manipulated file to be affected. Users are advised to update their software to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.