CVE-2020-9609: Adobe Acrobat DC

Medium severity, CVSS 5.5. EPSS: 2.7% chance of exploitation in the next 30 days.

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Affected products

• Adobe Acrobat DC: from 15.006.30060, before 15.006.30518 (fixed in 15.006.30518); from 15.008.20082, before 20.006.20042 (fixed in 20.006.20042); from 17.011.30059, before 17.011.30166 (fixed in 17.011.30166)
• Adobe Acrobat Reader DC: from 15.006.30060, before 15.006.30518 (fixed in 15.006.30518); from 15.008.20082, before 20.006.20042 (fixed in 20.006.20042); from 17.011.30059, before 17.011.30166 (fixed in 17.011.30166)

Published 2020-06-25. Last modified 2026-06-17.