Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a security bypass vulnerability. Successful exploitation could lead to security feature bypass.

The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30527, 2017.011.30175, 2020.001.30005, or 2020.012.20041. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to     arbitrary code execution . (CVE-2020-9715, CVE-2020-9722)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have a disclosure of sensitive data vulnerability. Successful exploitation     could lead to memory leak. (CVE-2020-9697)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have a security bypass vulnerability. Successful exploitation could lead to     privilege escalation . (CVE-2020-9714)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have an out-of-bounds write vulnerability. Successful exploitation could     lead to arbitrary code execution . (CVE-2020-9693, CVE-2020-9694)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have a security bypass vulnerability. Successful exploitation could lead to     security feature bypass. (CVE-2020-9696, CVE-2020-9712)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30527, 2017.011.30175, 2020.001.30005, or 2020.012.20041. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to     arbitrary code execution . (CVE-2020-9715, CVE-2020-9722)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have a disclosure of sensitive data vulnerability. Successful exploitation     could lead to memory leak. (CVE-2020-9697)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have a security bypass vulnerability. Successful exploitation could lead to     privilege escalation . (CVE-2020-9714)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have an out-of-bounds write vulnerability. Successful exploitation could     lead to arbitrary code execution . (CVE-2020-9693, CVE-2020-9694)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have a security bypass vulnerability. Successful exploitation could lead to     security feature bypass. (CVE-2020-9696, CVE-2020-9712)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote macOS host is a version prior to 2015.006.30527, 2017.011.30175, 2020.001.30005, or 2020.012.20041. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to     arbitrary code execution . (CVE-2020-9715, CVE-2020-9722)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have a disclosure of sensitive data vulnerability. Successful exploitation     could lead to memory leak. (CVE-2020-9697)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have a security bypass vulnerability. Successful exploitation could lead to     privilege escalation . (CVE-2020-9714)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have an out-of-bounds write vulnerability. Successful exploitation could     lead to arbitrary code execution . (CVE-2020-9693, CVE-2020-9694)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have a security bypass vulnerability. Successful exploitation could lead to     security feature bypass. (CVE-2020-9696, CVE-2020-9712)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 2015.006.30527, 2017.011.30175, 2020.001.30005, or 2020.012.20041. It is, therefore, affected by multiple vulnerabilities.

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to     arbitrary code execution . (CVE-2020-9715, CVE-2020-9722)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have a disclosure of sensitive data vulnerability. Successful exploitation     could lead to memory leak. (CVE-2020-9697)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have a security bypass vulnerability. Successful exploitation could lead to     privilege escalation . (CVE-2020-9714)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have an out-of-bounds write vulnerability. Successful exploitation could     lead to arbitrary code execution . (CVE-2020-9693, CVE-2020-9694)

  - Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier,     and 2015.006.30523 and earlier have a security bypass vulnerability. Successful exploitation could lead to     security feature bypass. (CVE-2020-9696, CVE-2020-9712)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
139581	Adobe Reader < 2015.006.30527 / 2017.011.30175 / 2020.001.30005 / 2020.012.20041 Multiple Vulnerabilities (APSB20-48)	Nessus	Windows	high
139580	Adobe Acrobat < 2015.006.30527 / 2017.011.30175 / 2020.001.30005 / 2020.012.20041 Multiple Vulnerabilities (APSB20-48)	Nessus	Windows	high
139579	Adobe Reader < 2015.006.30527 / 2017.011.30175 / 2020.001.30005 / 2020.012.20041 Multiple Vulnerabilities (APSB20-48) (macOS)	Nessus	MacOS X Local Security Checks	high
139578	Adobe Acrobat < 2015.006.30527 / 2017.011.30175 / 2020.001.30005 / 2020.012.20041 Multiple Vulnerabilities (APSB20-48) (macOS)	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2020-9696

medium

Tenable Plugins

high

high

high

high