Description
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-20-987/
Vendor Advisory x_refsource_misc
https://helpx.adobe.com/security/products/acrobat/apsb20-48.html
Scores
CVSS v3
3.3
EPSS
0.0160
EPSS Percentile
81.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Details
CWE
CWE-125
Status
published
Products (6)
adobe/acrobat_dc
20.001.30002
adobe/acrobat_dc
15.006.30060 - 15.006.30523
adobe/acrobat_dc
15.008.20082 - 20.009.20074
adobe/acrobat_reader_dc
20.001.30002
adobe/acrobat_reader_dc
15.006.30060 - 15.006.30523
adobe/acrobat_reader_dc
15.008.20082 - 20.009.20074
Published
Aug 19, 2020
Tracked Since
Feb 18, 2026