Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue does not require user interaction.
Use CWE-426, Adobe vendor hub and Acrobat product page to widen CVE-2025-64785 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2026-34621, CVE-2026-34622 and CVE-2026-27278 for nearby disclosures in the same product family.