CVE-2025-61830
Adobe Pass | Incorrect Authorization (CWE-863)
- State
- Published
- Severity
- 7.1 High
- Published
- Nov 11, 2025
- Updated
- Feb 26, 2026
- Reserved
- Oct 1, 2025
Description
Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install a malicious SDK.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.1 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N | adobe |
Weaknesses
- CWE-863 Incorrect Authorization (CWE-863)
Affected Products
| Product | Versions |
|---|---|
Adobe PassAdobe |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.