CVE-2020-3801: Adobe Acrobat DC

Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days.

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have a use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .

Affected products

• Adobe Acrobat DC: from 15.006.30060, before 15.006.30518 (fixed in 15.006.30518); from 15.008.20082, before 20.006.20042 (fixed in 20.006.20042); from 17.011.30059, before 17.011.30166 (fixed in 17.011.30166)
• Adobe Acrobat Reader DC: from 15.006.30060, before 15.006.30518 (fixed in 15.006.30518); from 15.008.20082, before 20.006.20042 (fixed in 20.006.20042); from 17.011.30059, before 17.011.30166 (fixed in 17.011.30166)

Published 2020-03-25. Last modified 2026-06-17.