CVE-2020-9711
Awaiting Analysis
Awaiting Analysis - Queue
Out-of-Bounds Read Vulnerability in Adobe Acrobat Reader
Publication date: 2026-06-23
Last updated on: 2026-06-23
Assigner: Adobe Systems Incorporated
Description
Description
Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| adobe | acrobat_reader | From 2015.006.30523 (inc) to 2020.009.20074 (inc) |
| adobe | acrobat_reader | From 2015.006.30523 (inc) to 2020.001.30002 (inc) |
| adobe | acrobat_reader | From 2015.006.30523 (inc) to 2017.011.30171 (inc) |
| adobe | acrobat_reader | From 2015.006.30523 (inc) |
| adobe | acrobat_reader | 2020.009.20074 |
| adobe | acrobat_reader | 2020.001.30002 |
| adobe | acrobat_reader | 2017.011.30171 |
| adobe | acrobat_reader | 2015.006.30523 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |