CVE-2025-27160
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 11, 2025
CWE ID 416
Summary
CVE-2025-27160 is aUse After Free vulnerability affecting Acrobat Reader versions 24.001.30225, 20.005.30748, and 25.001.20428 and earlier. This issue, if exploited, allows attackers to execute arbitrary code in the context of the current user. The vulnerability can be triggered when opening a maliciously crafted file, requiring user interaction for exploitation to occur.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Adobe Reader XI
Affected Vendors
- Adobe