In CISA KEV7.8 High
CVE-2020-9715
Adobe Acrobat Use-After-Free Vulnerability
AdobeAcrobat
Status
- Exploited in the wild
- In CISA KEV since 13 Apr
- Vendor fix available
Federal deadlineMon 27 Apr, 23:59 UTC
Passed 180 days ago
CISA KEV · added 13 Apr
Exploit probabilityEPSSchecked 23 Oct
33%probability of exploitation in the next 30 days
Higher than 98% of scored CVEs
SeverityCVSS
7.8High
Description NVD
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Coverage 6 articles · 4 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 13 Apr · 21:30 UTC | CISA | CISA Adds Adobe Acrobat CVE‑2020‑9715 to KEV, Urges Patch |
| Mon 13 Apr · 22:05 UTC | CISA | CISA Flags Adobe Acrobat CVE-2020-9715 Flaw, Urges Patch |
| Tue 14 Apr · 06:31 UTC | The Hacker News | CISA adds six KEV flaws amid active Fortinet exploits |
| Tue 14 Apr · 08:11 UTC | Security Affairs | CISA Adds Critical Adobe, Microsoft, Fortinet Flaws to KEV Catalog |
| Tue 14 Apr · 09:17 UTC | SecurityWeek | Organizations Warned of Exploited Windows, Adobe Acrobat Vulnerabilities |
| Tue 14 Apr · 17:21 UTC | SecurityWeek | Adobe Patches 55 Vulnerabilities Across 11 Products |
- Adobe Patches 55 Vulnerabilities Across 11 ProductsSecurityWeek
- Organizations Warned of Exploited Windows, Adobe Acrobat VulnerabilitiesSecurityWeek · mentions it in passing
- CISA Adds Critical Adobe, Microsoft, Fortinet Flaws to KEV CatalogSecurity Affairs · mentions it in passing
- CISA adds six KEV flaws amid active Fortinet exploitsThe Hacker News · mentions it in passing
- CISA Flags Adobe Acrobat CVE-2020-9715 Flaw, Urges PatchCISA · official notice
- CISA Adds Adobe Acrobat CVE‑2020‑9715 to KEV, Urges PatchCISA · first in our coverage · official notice