CVE-2024-20731: Adobe Acrobat

High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days.

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

• Adobe Acrobat: from 20.001.30005, before 20.005.30574 (fixed in 20.005.30574)
• Adobe Acrobat DC: from 15.008.20082, before 23.008.20533 (fixed in 23.008.20533)
• Adobe Acrobat Reader: from 20.001.30005, before 20.005.30574 (fixed in 20.005.30574)
• Adobe Acrobat Reader DC: from 15.008.20082, before 23.008.20533 (fixed in 23.008.20533)

Published 2024-02-15. Last modified 2026-06-17.