CVE-2020-3750

Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an…

published February 13, 2020

CVSS
—
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

🚨 A sneaky use-after-free vulnerability in Adobe Acrobat could open the door to arbitrary code execution! ⚡ This is definitely something to pay attention to! Think of it like a restaurant that leaves its kitchen door wide open while the chef is still cooking. If anyone can freely wander in, they could tamper with the recipe or even take over the kitchen entirely! If exploited, an attacker could execute any code they want, leading to anything from data theft to complete system takeover. It's like giving someone a blank check to do whatever they please with your system!

Put simply

Think of it like a restaurant that leaves its kitchen door wide open while the chef is still cooking. If anyone can freely wander in, they could tamper with the recipe or even take over the kitchen entirely! This vulnerability arises from improper memory management in Adobe Acrobat and Reader, enabling attackers to execute arbitrary code after a previously freed memory space is used again.

What to do

If exploited, an attacker could execute any code they want, leading to anything from data theft to complete system takeover. It's like giving someone a blank check to do whatever they please with your system! To secure your system, ensure you upgrade to the latest version of Adobe Acrobat and Reader. If you're using versions earlier than 2019.021.20061, 2017.011.30156, or 2015.006.30508, it's time to patch! 🛡️ You've got this! Keep your software updated, and you'll be well on your way to securing your digital fortress. 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04853 · 92.0th percentile
Published
2020-02-13T15:48Z
EPSS history
Timeline
  • 13 FEB 15:48Z
    Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an…
    cvelistv5