{"id":"adobe-acrobat-use-after-free-apr-2026","category":"patch","status":"closed","title":"Adobe Acrobat and Reader flaw CVE-2020-9715 used in attacks; fixed since August 2020","tldr":"Attackers are exploiting CVE-2020-9715 in old Adobe Acrobat and Reader installations on Windows and Mac. Adobe fixed every affected release track in August 2020. Open Help > Check for Updates and install the latest version.","summary":"CVE-2020-9715 is a memory-handling flaw in Adobe Acrobat and Reader on Windows and macOS that can let an attacker run code with the signed-in user's permissions. Adobe disclosed it and released fixes for all four affected release tracks on 11 August 2020. On 13 April 2026, CISA added the flaw to its catalogue of vulnerabilities used in attacks. The reviewed sources do not identify the attackers, victims or when exploitation began. Adobe rates the flaw critical; Western Australia's advisory reports a CVSS score of 7.8, rated high. As of 3 November 2026, the published fixes cover every affected track; the practical action remains updating any old installations.","action":"In Adobe Acrobat or Reader on each Windows computer and Mac, choose Help > Check for Updates and install the latest version offered. For a work-managed computer, ask IT to check it against Adobe bulletin APSB20-48.","product":"Adobe Acrobat and Acrobat Reader for Windows and macOS","audience":"both","severity":"critical","patch":"patched","exploited":true,"cves":["CVE-2020-9715"],"tags":["adobe","acrobat","reader","windows","macos","actively-exploited"],"affected":["Acrobat DC and Acrobat Reader DC, Continuous track: 2020.009.20074 and earlier, Windows and macOS","Acrobat 2020 and Acrobat Reader 2020, Classic 2020 track: 2020.001.30002, Windows and macOS","Acrobat 2017 and Acrobat Reader 2017, Classic 2017 track: 2017.011.30171 and earlier, Windows and macOS","Acrobat 2015 and Acrobat Reader 2015, Classic 2015 track: 2015.006.30523 and earlier, Windows and macOS"],"fixed":["Acrobat DC and Acrobat Reader DC, Continuous track: 2020.012.20041, Windows and macOS","Acrobat 2020 and Acrobat Reader 2020, Classic 2020 track: 2020.001.30005, Windows and macOS","Acrobat 2017 and Acrobat Reader 2017, Classic 2017 track: 2017.011.30175, Windows and macOS","Acrobat 2015 and Acrobat Reader 2015, Classic 2015 track: 2015.006.30527, Windows and macOS"],"matches":[{"platform":"windows","app":"Adobe Acrobat DC","bundle":"","fixed":"2020.012.20041"},{"platform":"macos","app":"Adobe Acrobat DC","bundle":"","fixed":"2020.012.20041"},{"platform":"windows","app":"Adobe Acrobat Reader DC","bundle":"","fixed":"2020.012.20041"},{"platform":"macos","app":"Adobe Acrobat Reader DC","bundle":"","fixed":"2020.012.20041"},{"platform":"windows","app":"Adobe Acrobat 2020","bundle":"","fixed":"2020.001.30005"},{"platform":"macos","app":"Adobe Acrobat 2020","bundle":"","fixed":"2020.001.30005"},{"platform":"windows","app":"Adobe Acrobat Reader 2020","bundle":"","fixed":"2020.001.30005"},{"platform":"macos","app":"Adobe Acrobat Reader 2020","bundle":"","fixed":"2020.001.30005"},{"platform":"windows","app":"Adobe Acrobat 2017","bundle":"","fixed":"2017.011.30175"},{"platform":"macos","app":"Adobe Acrobat 2017","bundle":"","fixed":"2017.011.30175"},{"platform":"windows","app":"Adobe Acrobat Reader 2017","bundle":"","fixed":"2017.011.30175"},{"platform":"macos","app":"Adobe Acrobat Reader 2017","bundle":"","fixed":"2017.011.30175"},{"platform":"windows","app":"Adobe Acrobat 2015","bundle":"","fixed":"2015.006.30527"},{"platform":"macos","app":"Adobe Acrobat 2015","bundle":"","fixed":"2015.006.30527"},{"platform":"windows","app":"Adobe Acrobat Reader 2015","bundle":"","fixed":"2015.006.30527"},{"platform":"macos","app":"Adobe Acrobat Reader 2015","bundle":"","fixed":"2015.006.30527"}],"sources":[{"kind":"advisory","title":"Security Updates Available for Adobe Acrobat and Reader | APSB20-48","url":"https://helpx.adobe.com/security/products/acrobat/apsb20-48.html","by":"Adobe","date":"2020-08-11"},{"kind":"advisory","title":"Adobe Reader Vulnerability - 20260414002","url":"https://soc.cyber.wa.gov.au/advisories/20260414002-Adobe-Acrobat-use-after-free-vulnerability/","by":"WA Cyber Security Unit","date":"2026-04-14"},{"kind":"research","title":"Vulnerability Report - April 2026","url":"https://www.vulnerability-lookup.org/2026/05/04/vulnerability-report-april-2026/","by":"Vulnerability-Lookup","date":"2026-05-04"}],"started":"2026-04-13","closed":"2026-04-14","created":"2026-11-03T22:02:49.048Z","updated":"2026-11-03T22:02:49.048Z","cve_notes":[{"cve":"CVE-2020-9715","name":"Use-after-free in Adobe Acrobat and Reader","what":"Adobe Acrobat and Reader can use memory after releasing it, allowing an attacker to run code with the current user's permissions.","severity":"critical","cvss":7.8}],"timeline":[{"at":"2026-04-14","added":"2026-11-03T22:00:26.134Z","kind":"other","text":"Western Australia's Cyber Security Unit urged administrators to apply Adobe's fixes. It said it had received no reports of exploitation on Western Australian Government networks at the time of its advisory.","url":"https://soc.cyber.wa.gov.au/advisories/20260414002-Adobe-Acrobat-use-after-free-vulnerability/","by":"WA Cyber Security Unit","patch":null},{"at":"2026-04-13","added":"2026-11-03T22:00:26.134Z","kind":"cisa-added","text":"CISA added CVE-2020-9715 to its Known Exploited Vulnerabilities catalogue, confirming evidence of attacks using the previously patched flaw.","url":"https://soc.cyber.wa.gov.au/advisories/20260414002-Adobe-Acrobat-use-after-free-vulnerability/","by":"WA Cyber Security Unit","patch":null},{"at":"2020-08-11","added":"2026-11-03T22:00:26.134Z","kind":"new-fix","text":"Adobe disclosed and fixed CVE-2020-9715 in Acrobat and Reader for Windows and macOS, with updates for the Continuous, Classic 2020, Classic 2017 and Classic 2015 tracks.","url":"https://helpx.adobe.com/security/products/acrobat/apsb20-48.html","by":"Adobe","patch":"patched"}],"url":"https://hard.fyi/live/adobe-acrobat-use-after-free-apr-2026/","json":"https://hard.fyi/api/live?id=adobe-acrobat-use-after-free-apr-2026"}