Veille CVE
CVE-2020-9715
7.8 Élevée Exploitée activementCatalogue CISA KEV — Adobe Acrobat Use-After-Free Vulnerability
Ajoutée le 13/04/2026 · Échéance de correction (agences US) : 27/04/2026
Action requise : Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Description
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.8 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 3.1 | 7.8 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 2.0 | 9.3 Élevée | nvd@nist.gov (NVD) | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Faiblesses (CWE)
Références
- https://blog.exodusintel.com/2021/04/20/analysis-of-a-use-after-free-vulnerability-in-adobe-acrobat-reader-dc/ ExploitPatchThird Party Advisory
- https://helpx.adobe.com/security/products/acrobat/apsb20-48.html Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-20-991/ Third Party AdvisoryVDB Entry
- https://blog.exodusintel.com/2021/04/20/analysis-of-a-use-after-free-vulnerability-in-adobe-acrobat-reader-dc/ ExploitPatchThird Party Advisory
- https://helpx.adobe.com/security/products/acrobat/apsb20-48.html Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-20-991/ Third Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-9715 US Government Resource