CVE-2020-3801

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and…

published March 25, 2020

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

🚨 A sneaky use-after-free vulnerability lurks in Adobe Acrobat and Reader that could leave your system wide open! ⚠️ Think of it like a restaurant that forgets to remove a table reservation after a diner leaves — that space is still considered occupied, leading to confusion when the next guest arrives. Similarly, this flaw leaves space in memory vulnerable to exploitation even after it should have been freed up. If exploited, this vulnerability could allow an attacker to execute arbitrary code on the affected systems, which means they could take control and cause all sorts of havoc. Imagine a guest being able to rearrange the restaurant's entire layout—disastrous!

Put simply

Think of it like a restaurant that forgets to remove a table reservation after a diner leaves — that space is still considered occupied, leading to confusion when the next guest arrives. Similarly, this flaw leaves space in memory vulnerable to exploitation even after it should have been freed up. This vulnerability exists in Adobe Acrobat and Reader due to improper memory management, leading to the possibility of executing malicious code when the memory is accessed after it has been freed. It primarily affects versions 2020.006.20034 and earlier as well as several 2017 and 2015 versions.

What to do

If exploited, this vulnerability could allow an attacker to execute arbitrary code on the affected systems, which means they could take control and cause all sorts of havoc. Imagine a guest being able to rearrange the restaurant's entire layout—disastrous! To protect your system, update Adobe Acrobat and Reader to the latest version available as soon as possible. Regularly check for updates and enable automatic updates to stay ahead of vulnerabilities like this one. 🛡️ You've got this! Keeping your software updated is a key step in securing your devices. 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04775 · 91.9th percentile
Published
2020-03-25T17:15Z
EPSS history
Timeline
  • 25 MAR 17:15Z
    Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and…
    cvelistv5