CISA
CISA Flags Adobe Acrobat CVE-2020-9715 Flaw, Urges Patch
According to CISA, the Known Exploited Vulnerabilities Catalog lists CVE-2020-9715 as an Adobe Acrobat Use-After-Free vulnerability that allows code execution. The entry for Adobe | Acrobat notes a related CWE of 416 and states that it is Unknown whether it has been used in ransomware campaigns.
Date Added is 13 April 2026, with a Due Date of 27 April 2026, and the action advised is to apply mitigations per vendor instructions, follow applicable guidance for cloud services, or discontinue use of the product if mitigations are unavailable. The KEV entry also provides links to Adobe’s security notes and the NVD page for CVE-2020-9715. This demonstrates CISA’s ongoing tracking of vulnerabilities exploited in the wild and the emphasis on prompt remediation where mitigations exist.
Story timeline CVE-2020-9715
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 13 Apr · 21:30 UTC | CISA | CISA Adds Adobe Acrobat CVE‑2020‑9715 to KEV, Urges Patch |
| Mon 13 Apr · 22:05 UTC | CISA | CISA Flags Adobe Acrobat CVE-2020-9715 Flaw, Urges Patch (this article) |
| Tue 14 Apr · 06:31 UTC | The Hacker News | CISA adds six KEV flaws amid active Fortinet exploits |
| Tue 14 Apr · 08:11 UTC | Security Affairs | CISA Adds Critical Adobe, Microsoft, Fortinet Flaws to KEV Catalog |
| Tue 14 Apr · 09:17 UTC | SecurityWeek | Organizations Warned of Exploited Windows, Adobe Acrobat Vulnerabilities |
| Tue 14 Apr · 17:21 UTC | SecurityWeek | Adobe Patches 55 Vulnerabilities Across 11 Products |