CVE-2020-9695

highpriority · track · 0EPSS 0.003 · 18 %ileDEEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.26% (18th) EPSS

CVSS 7.8 · high

Is it mine?

25 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · cert_bund · nvd

EPSS · scored 2026-10-27

Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

cvss

Technical severity, 0–10. One row per scoring source.

7.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · psirt@adobe.comexploitability 1.8 · impact 5.9

v3.17.1highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-787US

affected products (25)

Products and version ranges known to be affected.

Adobe Acrobat <2015.006.30527all versionscert_bundDE
Adobe Acrobat <2017.011.30175all versionscert_bundDE
Adobe Acrobat <2020.001.30005all versionscert_bundDE
Adobe Acrobat DC <2020.012.20041all versionscert_bundDE
Adobe Acrobat Reader <2015.006.30527all versionscert_bundDE
Adobe Acrobat Reader <2017.011.30175all versionscert_bundDE
Adobe Acrobat Reader <2020.001.30005all versionscert_bundDE
Adobe Acrobat Reader DC <2020.012.20041all versionscert_bundDE
Adobe Acrobat< 2015.006.30527cert_bundDE
Adobe Acrobat< 2017.011.30175cert_bundDE
Adobe Acrobat< 2020.001.30005cert_bundDE
Adobe Acrobat DC< 2020.012.20041cert_bundDE
Adobe Acrobat Reader< 2015.006.30527cert_bundDE
Adobe Acrobat Reader< 2017.011.30175cert_bundDE
Adobe Acrobat Reader< 2020.001.30005cert_bundDE
Adobe Acrobat Reader DC< 2020.012.20041cert_bundDE
Adobe Acrobat Reader≤ 0 ≤2015.006.30523enisa_euvdEU
adobe acrobat dc≤ 20.009.20074nvdUScpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:*:*:*
adobe acrobat dc15.000.0000 → 15.006.30523nvdUScpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:*:*:*
adobe acrobat dc17.009.20044 → 17.011.30171nvdUScpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:*:*:*

showing 20 of 25

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2026-1068Adobe Acrobat und Acrobat Reader: Mehrere SchwachstellenDeutsch2020-08-11csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe Acrobat und Adobe Acrobat Reader ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund nvd NVD CVE.org MITRE

published 2026-06-23modified 2026-09-29

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan