MSRXVulnerabilities / CVE-2020-9715
CVE-2020-9715
Published 2020-08-19 · published (not yet in NVD)
CVE-2020-9715
Exploited in the wild: CISA added it to the Known Exploited Vulnerabilities catalog on 2026-04-13, with a fix-by date of 2026-04-27. Patch it first.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
7.8 HIGH
CVSS 3.1 · CNA
CVSS 3.1 · CNA
33%
chance of exploitation in the next 30 days (EPSS; higher than 98% of CVEs)
chance of exploitation in the next 30 days (EPSS; higher than 98% of CVEs)
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .
Scores
Affected products
- Adobe Adobe Acrobat and Reader: 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier versions
3 references (advisories, patches, write-ups)
Sources: CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.