CVE-2020-3749

Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an…

published February 13, 2020

CVSS
—
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

⚠️ A crafty use-after-free vulnerability lurks in Adobe Acrobat and Reader versions up to 2019.021.20061, and it could hand attackers the keys to your system! Think of it like leaving a door wide open in a crowded office after someone steps out, letting anyone walk in unchallenged. This flaw allows the program to mismanage memory, like a waiter forgetting which table a dish belongs to, potentially serving it to the wrong person! If exploited, this vulnerability can lead to arbitrary code execution, which means an attacker could run any malicious code on your machine. This could result in unauthorized access to your files, data breaches, or even full control over your system — an absolutely devastating outcome!

Put simply

Think of it like leaving a door wide open in a crowded office after someone steps out, letting anyone walk in unchallenged. This flaw allows the program to mismanage memory, like a waiter forgetting which table a dish belongs to, potentially serving it to the wrong person! The use-after-free vulnerability in Adobe Acrobat and Reader allows attackers to execute arbitrary code by manipulating memory that the program no longer controls. This mishandling of memory can create pathways for attackers to exploit the application.

What to do

If exploited, this vulnerability can lead to arbitrary code execution, which means an attacker could run any malicious code on your machine. This could result in unauthorized access to your files, data breaches, or even full control over your system — an absolutely devastating outcome! Update Adobe Acrobat and Reader to the latest versions immediately to mitigate this vulnerability — specifically, ensure you're on 2019.021.20062 or later. Regularly check for updates and consider enabling automatic updates to stay protected! You've got this! Just follow these steps and you'll keep your system safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04853 · 92.0th percentile
Published
2020-02-13T15:45Z
EPSS history
Timeline
  • 13 FEB 15:45Z
    Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an…
    cvelistv5