{"id":"CVE-2020-29075","aliases":["EUVD-2020-21457","GHSA-j86v-4vf3-rfmv"],"status":"published","title":"PDF Injection BlackHat Talk","description":"Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) are affected by an information exposure vulnerability, that could enable an attacker to get a DNS interaction and track if the user has opened or closed a PDF file when loaded from the filesystem without a prompt. User interaction is required to exploit this vulnerability.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.07917,"percentile":0.94763,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-200"],"published":"2021-02-23T03:18:50Z","modified":"2026-06-17T03:11:03Z","products":[{"vendor":"adobe","product":"acrobat"},{"vendor":"adobe","product":"acrobat reader dc"},{"vendor":"adobe","product":"acrobat_dc"},{"vendor":"adobe","product":"acrobat_reader"},{"vendor":"adobe","product":"acrobat_reader_dc"}],"references":[{"url":"https://helpx.adobe.com/security/products/acrobat/apsb20-75.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-29075"},{"url":"https://github.com/advisories/GHSA-j86v-4vf3-rfmv"}],"sources":{"cve":[{"id":"CVE-2020-29075","title":"PDF Injection BlackHat Talk","description":"Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) are affected by an information exposure vulnerability, that could enable an attacker to get a DNS interaction and track if the user has opened or closed a PDF file when loaded from the filesystem without a prompt. User interaction is required to exploit this vulnerability.","status":"published","published":"2021-02-23T03:18:50.226Z","modified":"2024-09-16T19:26:00.84Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:55.460269Z"}],"euvd":[{"id":"EUVD-2020-21457","description":"Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) are affected by an information exposure vulnerability, that could enable an attacker to get a DNS interaction and track if the user has opened or closed a PDF file when loaded from the filesystem without a prompt. User interaction is required to exploit this vulnerability.","status":"published","published":"2021-02-23T03:18:50Z","modified":"2024-09-16T19:26:00Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","level":"high"}],"updated_at":"2026-11-03T00:55:22.776544Z"}],"ghsa":[{"id":"GHSA-j86v-4vf3-rfmv","title":"Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017...","description":"Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) are affected by an information exposure vulnerability, that could enable an attacker to get a DNS interaction and track if the user has opened or closed a PDF file when loaded from the filesystem without a prompt. User interaction is required to exploit this vulnerability.","status":"published","published":"2022-05-24T17:42:53Z","modified":"2023-01-29T05:05:51Z","cwes":["CWE-20","CWE-200"],"updated_at":"2026-11-02T14:45:53.268312Z"}],"nvd":[{"id":"CVE-2020-29075","description":"Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) are affected by an information exposure vulnerability, that could enable an attacker to get a DNS interaction and track if the user has opened or closed a PDF file when loaded from the filesystem without a prompt. User interaction is required to exploit this vulnerability.","status":"published","published":"2021-02-23T04:15:13.96Z","modified":"2026-06-17T03:11:03.753Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20","CWE-200"],"updated_at":"2026-11-02T14:06:37.687844Z"}]}}