high7.8Known exploited
CVE-2020-9715
Adobe Acrobat Use-After-Free Vulnerability
Exploited in the wild
This vulnerability is on the CISA Known Exploited Vulnerabilities list, added 2026-04-13. Federal due date: 2026-04-27.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
Adobe Acrobat contains a use-after-free vulnerability that allows for code execution
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Acrobat Dc | from 15.006.30060 through 15.006.30523 from 15.008.20082 through 20.009.20074 from 17.011.30059 through 17.011.30171 Version 20.001.30002 |
| Adobe | Acrobat Reader Dc | from 15.006.30060 through 15.006.30523 from 15.008.20082 through 20.009.20074 from 17.011.30059 through 17.011.30171 Version 20.001.30002 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- https://blog.exodusintel.com/2021/04/20/analysis-of-a-use-after-free-vulnerability-in-adobe-acrobat-reader-dc/
- https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
- https://www.zerodayinitiative.com/advisories/ZDI-20-991/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-9715