CVE-2020-24433: Adobe Acrobat Reader DC Local Privilege Escalation via Installer Component
Adobe Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a local privilege escalation vulnerability that could enable a user without administrator privileges to delete arbitrary files and potentially execute arbitrary code as SYSTEM. Exploitation of this issue requires an attacker to socially engineer a victim, or the attacker must already have some access to the environment.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-24433?
CVE-2020-24433 is classified as a local privilege escalation vulnerability.
How do I fix CVE-2020-24433?
To mitigate CVE-2020-24433, upgrade Adobe Acrobat Reader DC to the latest version available.
Which versions of Adobe Acrobat are affected by CVE-2020-24433?
CVE-2020-24433 affects Adobe Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier, and Adobe Acrobat DC versions 2017.011.30175 and earlier.
Can non-administrator users exploit CVE-2020-24433?
Yes, CVE-2020-24433 allows non-administrator users to escalate their privileges and potentially delete arbitrary files.
Is CVE-2020-24433 specific to Adobe software on particular operating systems?
CVE-2020-24433 is primarily associated with specific versions of Adobe Acrobat on Windows and does not affect the Apple macOS versions.