CVE-2020-3793

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and…

published March 25, 2020

CVSS
—
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

⚠️ A classic case of use-after-free lurking in Adobe Acrobat and Reader! This vulnerability could invite arbitrary code execution in versions 2020.006.20034 and earlier. 🔥 Think of this as a construction crew forgetting to remove scaffolding after a building is done — it creates an opportunity for unwanted guests to sneak in and take over the project! If exploited successfully, an attacker could execute arbitrary code on your system, potentially gaining full control over your device. This could lead to data theft, system corruption, or even malicious software installations, making it a situation to avoid at all costs!

Put simply

Think of this as a construction crew forgetting to remove scaffolding after a building is done — it creates an opportunity for unwanted guests to sneak in and take over the project! The use-after-free vulnerability occurs when Adobe Acrobat and Reader mishandle memory management, allowing attackers to exploit freed memory locations to execute their own code.

What to do

If exploited successfully, an attacker could execute arbitrary code on your system, potentially gaining full control over your device. This could lead to data theft, system corruption, or even malicious software installations, making it a situation to avoid at all costs! To mitigate this risk, ensure you're using the latest versions of Adobe Acrobat and Reader. For affected users, update to version 2020.006.20035 or later, 2017.011.30159 or later, or 2015.006.30511 or later as soon as possible. 👉 Regularly check for updates and enable automatic updates if available. You've got this! With these updates, you'll be reinforcing your defenses like a pro! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04888 · 92.0th percentile
Published
2020-03-25T15:58Z
EPSS history
Timeline
  • 25 MAR 15:58Z
    Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and…
    cvelistv5