Adobe Adobe Acrobat and Reader

CVE-2020-9715

HIGH 7.8CISA KEV ↗Exploitée selon l'ENISA depuis le 2026-04-13

En bref

Source: NVD
EPSS: EPSS 33.49 % · centile 98 (2026-10-31)
État: PUBLISHED
Publiée: 2020-08-19 00:00 UTC
Mise à jour: 2026-04-13 22:20 UTC
Attribuée par: adobe
Statut NVD: Analyzed

Rechercher sur…

Description

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .

Faiblesses (CWE)

CWE-416 — Utilisation après libération

Références

Scores

Version	Score	Vecteur	Évalué par
CVSS 3.1	HIGH 7.8	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	CISA-ADP
CVSS 3.1	HIGH 7.8	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	NVD · nvd@nist.gov (Primary)
CVSS 3.1	HIGH 7.8	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
CVSS 2.0	HIGH 9.3	AV:N/AC:M/Au:N/C:C/I:C/A:C	NVD · nvd@nist.gov (Primary)

Références européennes

ENISA EUVD · EUVD-2020-30495
GCVE · GCVE-0-2020-9715

Avis du CERT-FR

CERTFR-2020-AVI-496 — Multiples vulnérabilités dans Adobe Reader et Acrobat · cert.ssi.gouv.fr

Configurations affectées (CPE NVD)

cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:* ≥ 15.006.30060 ≤ 15.006.30523
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 ≤ 20.009.20074
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:* ≥ 17.011.30059 ≤ 17.011.30171
cpe:2.3:a:adobe:acrobat_dc:20.001.30002:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:* ≥ 15.006.30060 ≤ 15.006.30523
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 ≤ 20.009.20074
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:* ≥ 17.011.30059 ≤ 17.011.30171
cpe:2.3:a:adobe:acrobat_reader_dc:20.001.30002:*:*:*:classic:*:*:*

Produits affectés

Produit	Versions
Adobe · Adobe Acrobat and Reader	affected 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier versions

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
CISA Known Exploited Vulnerabilities	CC0 1.0
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD

⚠️ Adobe Adobe Acrobat and Reader