CVE-2020-3766

—

CVSS 3.1

7.8 high

EPSS

<1%p59

Published

Mar 25, 2020 (Mar 25, 2020)

Modified

Jun 17, 2026

Description

Adobe Genuine Integrity Service versions Version 6.4 and earlier have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation.

Vendors: adobe
Products: genuine integrity service
Weakness: CWE-276
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news1 stories

Adobe releases out-of-band patches for critical issues in Acrobat Reader, Photoshop, Bridge, ColdFusion

Security AffairsMar 18, 11:58 UTC · Mar 18, 2020Vulnerability in the wildCVE-2020-3795 CVE-2020-3799 CVE-2020-3792+28 CVEs