CVE-2020-9606: Use After Free

Q: What is the severity of CVE-2020-9606?

CVE-2020-9606 has a critical severity rating due to its potential to allow arbitrary code execution.

Q: How do I fix CVE-2020-9606?

To fix CVE-2020-9606, update Adobe Acrobat and Reader to the latest version provided by Adobe.

Q: Which versions of Adobe Acrobat are affected by CVE-2020-9606?

CVE-2020-9606 affects Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier.

Q: Can CVE-2020-9606 be exploited remotely?

Yes, CVE-2020-9606 can be exploited remotely, allowing attackers to run arbitrary code on vulnerable systems.

Q: What types of systems are affected by CVE-2020-9606?

CVE-2020-9606 impacts systems running vulnerable versions of Adobe Acrobat and Reader on both Windows and macOS.

Published Jun 25, 2020

Updated

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .

Affected Software

8 affected components

Adobe Acrobat DC>=15.006.30060<15.006.30518

Adobe Acrobat DC>=15.008.20082<20.006.20042

Adobe Acrobat DC>=17.011.30059<17.011.30166

Adobe Acrobat Reader DC>=15.006.30060<15.006.30518

Adobe Acrobat Reader DC>=15.008.20082<20.006.20042

Adobe Acrobat Reader DC>=17.011.30059<17.011.30166

Apple macOS

Microsoft Windows

Event History

Jun 25, 2020

CVE Published

via MITRE·09:22 PM

Data Sourced

via MITRE·09:22 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-9606?

CVE-2020-9606 has a critical severity rating due to its potential to allow arbitrary code execution.

How do I fix CVE-2020-9606?

To fix CVE-2020-9606, update Adobe Acrobat and Reader to the latest version provided by Adobe.

Which versions of Adobe Acrobat are affected by CVE-2020-9606?