CVE-2020-9713: Acrobat Reader | Out-of-bounds Read (CWE-125)

Q: What is the severity of CVE-2020-9713?

CVE-2020-9713 has a medium severity rating of 5.5.

Q: How do I fix CVE-2020-9713?

To fix CVE-2020-9713, users should update Adobe Acrobat and Reader to the latest versions available.

Q: What is the impact of CVE-2020-9713?

CVE-2020-9713 can lead to the disclosure of sensitive memory information.

Q: Can an attacker exploit CVE-2020-9713 remotely?

An attacker could exploit CVE-2020-9713 to disclose sensitive information, but exploitation may require user interaction.

Published Jun 23, 2026

Updated

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Software

12 affected components

Adobe Acrobat<=2020.009.20074, =2020.001.30002, <=2017.011.30171, <=2015.006.30523

Adobe Acrobat Reader<=2020.009.20074, =2020.001.30002, <=2017.011.30171, <=2015.006.30523

All of the following

Any of the following

Adobe Acrobat DC<=20.009.20074

Adobe Acrobat DC>=15.000.0000<=15.006.30523

Adobe Acrobat DC>=17.009.20044<=17.011.30171

Adobe Acrobat DC=20.001.30002

Adobe Acrobat Reader=20.001.30002

Adobe Acrobat Reader DC<=20.009.20074

Adobe Acrobat Reader DC>=15.000.0000<=15.006.30523

Adobe Acrobat Reader DC>=17.009.20044<=17.011.30171

Any of the following

Apple macOS

Microsoft Windows

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Adobe Acrobat and Reader to a version that resolves this vulnerability.
Fixed in 2020.009.20074Patch 2020.009.20074 and earlier
Upgrade
Upgrade Adobe Acrobat and Reader to a version that resolves this vulnerability.
Fixed in 2020.001.30002Patch 2020.001.30002
Upgrade
Upgrade Adobe Acrobat and Reader to a version that resolves this vulnerability.
Fixed in 2017.011.30171Patch 2017.011.30171 and earlier
Upgrade
Upgrade Adobe Acrobat and Reader to a version that resolves this vulnerability.
Fixed in 2015.006.30523Patch 2015.006.30523 and earlier
Compensating control
Since exploitation requires user interaction (victim opening a malicious file), reduce exposure by preventing users from opening untrusted/malicious PDF files (e.g., via email/content filtering and user training).

Event History

Jun 23, 2026

CVE Published

via MITRE·05:47 PM

Data Sourced

via MITRE·05:47 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:17 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2020-9713?

CVE-2020-9713 has a medium severity rating of 5.5.

How do I fix CVE-2020-9713?

To fix CVE-2020-9713, users should update Adobe Acrobat and Reader to the latest versions available.

What is the impact of CVE-2020-9713?

CVE-2020-9713 can lead to the disclosure of sensitive memory information.

Which versions of Adobe Acrobat and Reader are affected by CVE-2020-9713?

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, and 2017.011.30171 and earlier are affected by CVE-2020-9713.

Can an attacker exploit CVE-2020-9713 remotely?