CVE-2025-47111: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

A NULL Pointer Dereference vulnerability (CVE-2025-47111) was discovered in Adobe Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier. The vulnerability was disclosed on June 10, 2025, and was assigned by Adobe Systems Incorporated (MITRE CVE, NVD).

The vulnerability is classified as a NULL Pointer Dereference (CWE-476) with a CVSS v3.1 Base Score of 5.5 (Medium). The attack vector is local (AV:L), with low attack complexity (AC:L), requiring no privileges (PR:N) but needs user interaction (UI:R). The scope is unchanged (S:U), with no impact on confidentiality (C:N) or integrity (I:N), but high impact on availability (A:H) (NVD, Wiz Security).

If successfully exploited, this vulnerability could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. The exploitation requires user interaction, specifically opening a malicious file (Wiz Security).

Adobe has released security updates to address this vulnerability along with other critical and important vulnerabilities in Adobe Acrobat and Reader for Windows and macOS platforms (Adobe Security).