CVE-2020-9715 is a critical use-after-free vulnerability affecting multiple versions of Adobe Acrobat and Reader across Adobe, Apple, and Microsoft platforms. This vulnerability carries a CVSS score of 7.8 (High), indicating that a successful exploit, requiring user interaction, could lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. While not listed on the KEV catalog, its high EPSS score and FAUCET Risk Score of 97/100 suggest a significant potential for exploitation. Currently, there is no public exploit code available in common repositories like Metasploit or ExploitDB, and community discussion and media coverage are limited, with only one article from BleepingComputer reporting on Adobe's fix.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 15.006.30060, <= 15.006.30523CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:* | ||
>= 15.008.20082, <= 20.009.20074CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* | ||
>= 17.011.30059, <= 17.011.30171CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:* | ||
20.001.30002CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:20.001.30002:*:*:*:classic:*:*:* | ||
>= 15.006.30060, <= 15.006.30523CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.