CVE-2020-9615

—

CVSS 3.1

7.0 high

EPSS

1%p71

Published

Jun 25, 2020 (Jun 25, 2020)

Modified

Jun 17, 2026

Description

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have a race condition vulnerability. Successful exploitation could lead to security feature bypass.

Vendors: adobe
Products: acrobat dc, acrobat reader dc
Weakness: CWE-362
Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news1 stories

Adobe addresses critical issues in Acrobat, Reader, and DNG SDK

Security AffairsMay 12, 16:41 UTC · May 12, 2020Vulnerability CVE-2020-9610 CVE-2020-9612 CVE-2020-9615+11 CVEs