CVE-2025-43579: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an Information Exposure vulnerability that could result in a Security feature bypass. This vulnerability was disclosed on June 10, 2025, and was assigned CVE-2025-43579. The vulnerability allows attackers to gain unauthorized access to sensitive information without requiring user interaction (NVD, Adobe Bulletin).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (Medium) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. This indicates a Local attack vector, Low attack complexity, No privileges required, Required user interaction, Unchanged scope, High impact on confidentiality, and No impact on integrity or availability. The vulnerability is classified under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) (NVD).

The vulnerability could lead to unauthorized access to sensitive information. The CVSS scoring indicates a High impact on confidentiality, while maintaining no impact on system integrity or availability (NVD, Wiz).

Adobe has released security updates to address this vulnerability. Users are advised to update to the latest version of Adobe Acrobat Reader (Adobe Bulletin).