Adobe · Acrobat
CVE-2020-9715
Adobe Acrobat Use-After-Free Vulnerability
O que é
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .
CISA: Adobe Acrobat contains a use-after-free vulnerability that allows for code execution
O que fazer
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Prazo para as agências federais dos EUA: 27 de abril de 2026
Mais falhas exploradas de Adobe
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 27 de out. de 2026 | Unrestricted Upload of File with Dangerous Type | Commerce and Magento | Crítica 9,3 | 31% |
| 24 de set. de 2026 | Commerce and Magento Incorrect Authorization Vulnerability | Commerce and Magento | Crítica 9,1 | 90% |
| 8 de set. de 2026 | Improper Neutralization of Special Elements Used in a Template Engine | Commerce and Magento | Crítica 10,0 | 3,9% |
| 7 de jul. de 2026 | Path Traversal | ColdFusion | Crítica 10,0 | 42% |
| 20 de mai. de 2026 | Heap-Based Buffer Overflow | Acrobat and Reader | Alto 8,8 | 87% |
| 13 de abr. de 2026 | Prototype Pollution | Acrobat and Reader | Alto 8,6 | 7,2% |
| 24 de out. de 2025 | Improper Input Validation | Commerce and Magento | Crítica 9,1 | 95% |
| 15 de out. de 2025 | Experience Manager Forms Code Execution | Experience Manager (AEM) Forms | Crítica 10,0 | 89% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.