cbcvebase.
CVE-2020-9714
published 2020-08-19

CVE-2020-9714: Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a security bypass…

PriorityP336high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
2.79%
84.9th percentile
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a security bypass vulnerability. Successful exploitation could lead to privilege escalation .

Affected

9 ranges
VendorProductVersion rangeFixed in
adobeacrobat_dc
adobeacrobat_dc15.006.30060 – 15.006.30523
adobeacrobat_dc15.008.20082 – 20.009.20074
adobeacrobat_dc17.011.30059 – 17.011.30171
adobeacrobat_reader_dc
adobeacrobat_reader_dc15.006.30060 – 15.006.30523
adobeacrobat_reader_dc15.008.20082 – 20.009.20074
adobeacrobat_reader_dc17.011.30059 – 17.011.30171
adobeadobe_acrobat_and_reader

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.