« Volver al listado

CVE-2020-9711

Estado: AnalizadaMedia (5.5)—

Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Adobe — Acrobat DCAdobe — Acrobat ReaderAdobe — Acrobat Reader DC

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-9711",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2020-9711",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-06-23T19:40:49.421594Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@adobe.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@adobe.com",
      "affectedData": [
        {
          "vendor": "Adobe",
          "product": "Acrobat Reader",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "semver",
              "lessThanOrEqual": "2015.006.30523"
            }
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-06-23T18:17:31.530",
  "references": [
    {
      "url": "https://helpx.adobe.com/security/products/acrobat/apsb20-48.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@adobe.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@adobe.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
    },
    {
      "lang": "es",
      "value": "Las versiones de Acrobat Reader 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 y anteriores están afectadas por una vulnerabilidad de lectura fuera de límites que podría conducir a la divulgación de memoria sensible. Un atacante podría aprovechar esta vulnerabilidad para divulgar información sensible. La explotación de este problema requiere interacción del usuario en que una víctima debe abrir un archivo malicioso."
    }
  ],
  "lastModified": "2026-09-29T09:10:00.157",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F69CF07D-D80A-4B00-94E9-C5A0D96C02B7",
              "versionEndIncluding": "20.009.20074"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB53FC96-AA45-4802-858E-692344B7B1E0",
              "versionEndIncluding": "15.006.30523",
              "versionStartIncluding": "15.000.0000"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B680465C-C4FF-4CD4-8331-DBCD4BC2A6DF",
              "versionEndIncluding": "17.011.30171",
              "versionStartIncluding": "17.009.20044"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_dc:20.001.30002:*:*:*:classic:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A8E2402A-9025-4322-86D2-B65ABB33AFA3"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:20.001.30002:*:*:*:classic:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79D47FD2-8C83-445E-B3E8-80A201920173"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "84F9AA0A-731D-498D-9BAA-1C3FAFC34F0D",
              "versionEndIncluding": "20.009.20074"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "20999B95-E3B8-44C4-AFB0-A59B88166E3B",
              "versionEndIncluding": "15.006.30523",
              "versionStartIncluding": "15.000.0000"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6CDB07E7-7976-4C59-BD77-5D3A6E79F58A",
              "versionEndIncluding": "17.011.30171",
              "versionStartIncluding": "17.009.20044"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@adobe.com"
}