This vulnerability in Adobe Acrobat Reader arises from improper verification of cryptographic signatures (CWE-347). Affected versions include 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803, and earlier. The flaw could allow an attacker to bypass security features and gain limited unauthorized write access, but exploitation requires user interaction with a cryptographic signature. The CVSS v3.1 base score is 3.3, reflecting low severity, with attack vector local, low complexity, no privileges required, user interaction required, and impact limited to integrity.

The vulnerability could allow an attacker to bypass security features and gain limited unauthorized write access on affected Adobe Acrobat Reader versions. There is no impact on confidentiality or availability. Exploitation requires user interaction, limiting the risk. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when interacting with cryptographic signatures in Acrobat Reader. No official patch or workaround is currently documented.