CVE-2025-47112: Adobe Acrobat Reader · Out-of-bounds Read
Affects Adobe Acrobat ReaderSource CVE Database V5
Not known to be exploited · CVSS 5.5 Medium.
Data as of 26 Oct 2026, 12:29 UTC
- EPSS
- 0.4% chance of exploitation in 30 days – higher than 35% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 10 Jun 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | Affected
| Fixed in– |
AI-suggested
- Apply official Adobe patches promptly once they become available to remediate the vulnerability. Monitor Adobe security advisories closely for updates.
- Until patches are released, implement strict email and web gateway filtering to block or quarantine suspicious PDF files, especially those originating from untrusted or external sources.
- Educate users about the risks of opening unsolicited or unexpected PDF attachments and encourage verification of file sources before opening.
- Employ endpoint security solutions capable of sandboxing or analyzing PDF files for malicious behavior prior to user interaction.
- Consider disabling or restricting the use of Adobe Acrobat Reader in favor of alternative PDF viewers with a smaller attack surface or enhanced security features, where feasible.
- Use application whitelisting and privilege restrictions to limit the ability of malicious PDFs to execute further code or access sensitive resources.
- Monitor network and endpoint logs for unusual activity that may indicate exploitation attempts or information leakage.
- Implement Data Loss Prevention (DLP) controls to detect and prevent unauthorized exfiltration of sensitive data that could result from exploitation.
Description
Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.