Adobe Acrobat Reader Vulnerabilities Let Attackers Execute Arbitrary Code and Bypass Security

Adobe published security bulletin APSB25-119 (Dec 9, 2025) addressing multiple vulnerabilities in Acrobat and Reader that include two critical arbitrary code execution flaws (CVSS 7.8: CVE-2025-64785, CVE-2025-64899) and two moderate signature verification bugs (CVSS 3.3). Affected products include Acrobat DC, Acrobat Reader DC, Acrobat 2024, Acrobat 2020, and Reader 2020 on Windows and macOS; patched versions are available and Adobe urges immediate updates, noting no known in-the-wild exploitation at this time.