CVE-2020-3746

Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an…

published February 13, 2020

CVSS
—
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

⚠️ Beware of this sneaky use-after-free vulnerability in Adobe Acrobat and Reader! An attacker could exploit it to execute arbitrary code with just the right conditions. 🔥 Think of this as a restaurant where a waiter mistakenly serves a dish that’s already been cleaned up — if someone orders that dish again, they could end up getting something unexpectedly dangerous instead! If successfully exploited, this vulnerability could allow an attacker to run arbitrary code on the victim's machine, potentially leading to data theft, unauthorized access, or system compromise. This is particularly risky as users often trust applications like Adobe to open documents safely!

Put simply

Think of this as a restaurant where a waiter mistakenly serves a dish that’s already been cleaned up — if someone orders that dish again, they could end up getting something unexpectedly dangerous instead! The use-after-free vulnerability occurs when software continues to use a memory location after it has been freed, allowing attackers to inject and execute code in that space, potentially taking control of the application.

What to do

If successfully exploited, this vulnerability could allow an attacker to run arbitrary code on the victim's machine, potentially leading to data theft, unauthorized access, or system compromise. This is particularly risky as users often trust applications like Adobe to open documents safely! Update Adobe Acrobat and Reader to the latest versions immediately to eliminate this vulnerability. Regularly check for updates and apply them, ensuring your software remains secure from such exploits. You've got this! Stay vigilant and keep your software up to date for a safer experience. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04853 · 92.0th percentile
Published
2020-02-13T15:44Z
EPSS history
Timeline
  • 13 FEB 15:44Z
    Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an…
    cvelistv5