CVE-2020-9600 - Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an out-of-bounds read vulnerability

Back Back to CVE browser

HIGH

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an out-of-bounds read vulnerability

Published Jun 25, 2020

7.5

HIGH

CVSS 3.1

EPSS 3.47%

Description

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Affected products

Vendor Adobe Product Adobe Acrobat and Reader Default
unknown
Affected
- 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier versions

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Adobe	Adobe Acrobat and Reader	unknown	Affected 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier versions

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30389
Advisory
https://helpx.adobe.com/security/products/acrobat/apsb20-24.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30389		Advisory
https://helpx.adobe.com/security/products/acrobat/apsb20-24.html		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner adobe

Published Jun 25, 2020

Updated Aug 4, 2024

Reserved Mar 2, 2020

Link CVE-2020-9600

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-9600

Red Hat

No data

ENISA EUVD

Assigner adobe

Published Jun 25, 2020

Updated Aug 4, 2024

Link EUVD-2020-30389

GitHub

No data