Adobe Acrobat and Reader flaw CVE-2020-9715 used in attacks; fixed since August 2020
Attackers are exploiting CVE-2020-9715 in old Adobe Acrobat and Reader installations on Windows and Mac. Adobe fixed every affected release track in August 2020. Open Help > Check for Updates and install the latest version.
In Adobe Acrobat or Reader on each Windows computer and Mac, choose Help > Check for Updates and install the latest version offered. For a work-managed computer, ask IT to check it against Adobe bulletin APSB20-48.
- Adobe Acrobat DCfixed in 2020.012.20041 and later
- Adobe Acrobat DCfixed in 2020.012.20041 and later
- Adobe Acrobat Reader DCfixed in 2020.012.20041 and later
- Adobe Acrobat Reader DCfixed in 2020.012.20041 and later
- Adobe Acrobat 2020fixed in 2020.001.30005 and later
- Adobe Acrobat 2020fixed in 2020.001.30005 and later
- Adobe Acrobat Reader 2020fixed in 2020.001.30005 and later
- Adobe Acrobat Reader 2020fixed in 2020.001.30005 and later
- Adobe Acrobat 2017fixed in 2017.011.30175 and later
- Adobe Acrobat 2017fixed in 2017.011.30175 and later
- Adobe Acrobat Reader 2017fixed in 2017.011.30175 and later
- Adobe Acrobat Reader 2017fixed in 2017.011.30175 and later
- Adobe Acrobat 2015fixed in 2015.006.30527 and later
- Adobe Acrobat 2015fixed in 2015.006.30527 and later
- Adobe Acrobat Reader 2015fixed in 2015.006.30527 and later
- Adobe Acrobat Reader 2015fixed in 2015.006.30527 and later
What’s happening
CVE-2020-9715 is a memory-handling flaw in Adobe Acrobat and Reader on Windows and macOS that can let an attacker run code with the signed-in user's permissions. Adobe disclosed it and released fixes for all four affected release tracks on 11 August 2020. On 13 April 2026, CISA added the flaw to its catalogue of vulnerabilities used in attacks. The reviewed sources do not identify the attackers, victims or when exploitation began. Adobe rates the flaw critical; Western Australia's advisory reports a CVSS score of 7.8, rated high. As of 3 November 2026, the published fixes cover every affected track; the practical action remains updating any old installations.
- What
- Flaw
- Affects
- Adobe Acrobat and Acrobat Reader for Windows and macOS
- Affected
- Acrobat DC and Acrobat Reader DC, Continuous track: 2020.009.20074 and earlier, Windows and macOS
Acrobat 2020 and Acrobat Reader 2020, Classic 2020 track: 2020.001.30002, Windows and macOS
Acrobat 2017 and Acrobat Reader 2017, Classic 2017 track: 2017.011.30171 and earlier, Windows and macOS
Acrobat 2015 and Acrobat Reader 2015, Classic 2015 track: 2015.006.30523 and earlier, Windows and macOS - Fixed in
- Acrobat DC and Acrobat Reader DC, Continuous track: 2020.012.20041, Windows and macOS
Acrobat 2020 and Acrobat Reader 2020, Classic 2020 track: 2020.001.30005, Windows and macOS
Acrobat 2017 and Acrobat Reader 2017, Classic 2017 track: 2017.011.30175, Windows and macOS
Acrobat 2015 and Acrobat Reader 2015, Classic 2015 track: 2015.006.30527, Windows and macOS - Since
- 13 Apr 2026
- Closed
- 14 Apr 2026
Timeline
- Update
Western Australia's Cyber Security Unit urged administrators to apply Adobe's fixes. It said it had received no reports of exploitation on Western Australian Government networks at the time of its advisory.
- CISA added
CISA added CVE-2020-9715 to its Known Exploited Vulnerabilities catalogue, confirming evidence of attacks using the previously patched flaw.
- New fixFixed
Adobe disclosed and fixed CVE-2020-9715 in Acrobat and Reader for Windows and macOS, with updates for the Continuous, Classic 2020, Classic 2017 and Classic 2015 tracks.
Sources
- Security Updates Available for Adobe Acrobat and Reader | APSB20-48Adobe · 11 Aug 2020
- Adobe Reader Vulnerability - 20260414002WA Cyber Security Unit · 14 Apr 2026
- Vulnerability Report - April 2026Vulnerability-Lookup · 4 May 2026