CVE-2020-3792

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and…

published March 25, 2020

CVSS
—
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

⚠️ A surprising twist in Adobe Acrobat! A use-after-free vulnerability lurking in versions 2020.006.20034 and earlier opens the door to arbitrary code execution. 🔥 Think of it like a restaurant that fails to check if a dish has been returned before serving it again — a previously used dish might have something dangerous left on it. In this case, attackers could exploit leftover memory and take control of your system. This vulnerability could allow attackers to execute arbitrary code on your machine, potentially leading to the installation of malicious software, data theft, or even complete system compromise. While there's no known exploitation yet, the impact could be devastating if it gets into the wrong hands.

Put simply

Think of it like a restaurant that fails to check if a dish has been returned before serving it again — a previously used dish might have something dangerous left on it. In this case, attackers could exploit leftover memory and take control of your system. The use-after-free vulnerability in Adobe Acrobat and Reader occurs when the application improperly manages memory allocation, allowing an attacker to manipulate the application's control flow and execute harmful code.

What to do

This vulnerability could allow attackers to execute arbitrary code on your machine, potentially leading to the installation of malicious software, data theft, or even complete system compromise. While there's no known exploitation yet, the impact could be devastating if it gets into the wrong hands. To protect yourself, update Adobe Acrobat and Reader to the latest versions immediately. Ensure you are using versions beyond 2020.006.20034, 2017.011.30158, and 2015.006.30510. Regularly check for updates to keep your software secure! You've got this! Stay vigilant and keep your software updated to guard against potential threats! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04888 · 92.0th percentile
Published
2020-03-25T15:56Z
EPSS history
Timeline
  • 25 MAR 15:56Z
    Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and…
    cvelistv5