{"id":"CVE-2020-9715","aliases":["EUVD-2020-30495","GHSA-wxg9-xx37-xj49"],"status":"published","title":"Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and...","description":"Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.33256,"percentile":0.98382,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-416"],"published":"2020-08-19T00:00:00Z","modified":"2026-06-17T03:28:26Z","kev":{"date_added":"2026-04-13","due_date":"2026-04-27","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2026-04-13"},{"source":"kev","since":"2026-04-13"}],"exploits":[{"source":"pocgithub","id":"lsw29475/CVE-2020-9715","title":"lsw29475/CVE-2020-9715","date":"2022-01-10","url":"https://github.com/lsw29475/CVE-2020-9715"},{"source":"pocgithub","id":"f8al/PoC-CVE-2020-9715","title":"f8al/PoC-CVE-2020-9715","date":"2026-04-14","url":"https://github.com/f8al/PoC-CVE-2020-9715"}],"products":[{"vendor":"adobe","product":"acrobat"},{"vendor":"adobe","product":"acrobat_dc"},{"vendor":"adobe","product":"acrobat_reader_dc"},{"vendor":"adobe","product":"adobe acrobat and reader"}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-991/","tags":["x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://helpx.adobe.com/security/products/acrobat/apsb20-48.html","tags":["x_transferred","Vendor Advisory"]},{"url":"https://blog.exodusintel.com/2021/04/20/analysis-of-a-use-after-free-vulnerability-in-adobe-acrobat-reader-dc/","tags":["x_transferred","Exploit","Patch","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-9715","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9715"},{"url":"https://blog.exodusintel.com/2021/04/20/analysis-of-a-use-after-free-vulnerability-in-adobe-acrobat-reader-dc"},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-991"},{"url":"https://github.com/advisories/GHSA-wxg9-xx37-xj49"}],"sources":{"cve":[{"id":"CVE-2020-9715","description":"Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .","status":"published","published":"2020-08-19T00:00:00Z","modified":"2026-04-13T22:20:25.649Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:35:49.538427Z"}],"euvd":[{"id":"EUVD-2020-30495","description":"Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .","status":"published","published":"2020-08-19T00:00:00Z","modified":"2026-04-13T22:20:25Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2026-04-13","updated_at":"2026-11-02T19:24:27.052992Z"}],"ghsa":[{"id":"GHSA-wxg9-xx37-xj49","title":"Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and...","description":"Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .","status":"published","published":"2022-05-24T17:26:11Z","modified":"2026-04-13T18:30:34Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:07:26.169567Z"}],"kev":[{"id":"CVE-2020-9715","title":"Adobe Acrobat Use-After-Free Vulnerability","description":"Adobe Acrobat contains a use-after-free vulnerability that allows for code execution","cwes":["CWE-416"],"kev":{"date_added":"2026-04-13","due_date":"2026-04-27","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:15.999436Z"}],"nvd":[{"id":"CVE-2020-9715","description":"Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .","status":"published","published":"2020-08-19T14:15:13.407Z","modified":"2026-06-17T03:28:26.997Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:06:13.05572Z"}]}}