CVE-2024-20733: Adobe Acrobat

Medium severity, CVSS 5.5. EPSS: 3.4% chance of exploitation in the next 30 days.

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service. An attacker could leverage this vulnerability to cause the application to crash, resulting in a denial of service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

• Adobe Acrobat: from 20.001.30005, before 20.005.30574 (fixed in 20.005.30574)
• Adobe Acrobat DC: from 15.008.20082, before 23.008.20533 (fixed in 23.008.20533)
• Adobe Acrobat Reader: from 20.001.30005, before 20.005.30574 (fixed in 20.005.30574)
• Adobe Acrobat Reader DC: from 15.008.20082, before 23.008.20533 (fixed in 23.008.20533)

Published 2024-02-15. Last modified 2026-06-17.