CVE-2020-9592

—

CVSS 3.1

7.8 high

EPSS

2%p82

Published

Jun 25, 2020 (Jun 25, 2020)

Modified

Jun 17, 2026

Description

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have a security bypass vulnerability. Successful exploitation could lead to security feature bypass.

Vendors: adobe
Products: acrobat dc, acrobat reader dc
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news2 stories

Shadow Attacks Let Attackers Replace Content in Digitally Signed PDFs

The Hacker NewsFeb 23, 10:46 UTC · Feb 23, 2021Vulnerability CVE-2020-9592 CVE-2020-9596 CVE-2020-28352+3 CVEs

Shadow attacks allow replacing content in signed PDF files

Security AffairsJul 27, 05:57 UTC · Jul 27, 2020Vulnerability CVE-2020-9592 CVE-2020-9596