CVE-2020-9713: Adobe Acrobat DC

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

• Adobe Acrobat DC: up to and including 20.009.20074; from 15.000.0000, up to and including 15.006.30523; from 17.009.20044, up to and including 17.011.30171; version 20.001.30002 only
• Adobe Acrobat Reader: version 20.001.30002 only
• Adobe Acrobat Reader DC: up to and including 20.009.20074; from 15.000.0000, up to and including 15.006.30523; from 17.009.20044, up to and including 17.011.30171

Published 2026-06-23. Last modified 2026-09-29.