Wiz
Vulnerability DatabaseCVE-2020-9598

CVE-2020-9598: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Overview

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier were found to contain an invalid memory access vulnerability. The vulnerability was assigned CVE-2020-9598 and was publicly disclosed in May 2020. This security flaw affects multiple versions of Adobe's PDF handling software products (NVD, MITRE).

Technical details

The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. The flaw is categorized as CWE-119, which refers to an improper restriction of operations within the bounds of a memory buffer. The vulnerability specifically involves invalid memory access issues that could potentially be exploited (NVD).

Impact

Successful exploitation of this vulnerability could lead to information disclosure. The vulnerability affects the confidentiality of the system, with no direct impact on integrity or availability (NVD, Threatpost).

Exploitability

The vulnerability requires local access and user interaction to be exploited. Adobe reported that they were not aware of any exploits in the wild for this vulnerability at the time of disclosure (Threatpost).

Mitigation and workarounds

Adobe addressed this vulnerability by releasing security updates for the affected versions. Users are advised to update to the latest version of their respective Adobe Acrobat and Reader products (Adobe Advisory).

Additional resources

Source: This report was generated using AI

Related Adobe Acrobat Reader Continuous vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-48373HIGH7.8
  • Adobe Acrobat Reader Continuous logoAdobe Acrobat Reader Continuous
  • cpe:2.3:a:adobe:acrobat
NoYesJul 17, 2026
CVE-2020-9695HIGH7.8
  • Adobe Acrobat Reader Continuous logoAdobe Acrobat Reader Continuous
  • cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*
NoYesJun 23, 2026
CVE-2026-47965HIGH7.8
  • Adobe Acrobat Reader Continuous logoAdobe Acrobat Reader Continuous
  • cpe:2.3:a:adobe:acrobat_reader_dc
NoYesJun 12, 2026
CVE-2020-9713MEDIUM5.5
  • Adobe Acrobat Reader Continuous logoAdobe Acrobat Reader Continuous
  • cpe:2.3:a:adobe:acrobat_dc
NoYesJun 23, 2026
CVE-2020-9711MEDIUM5.5
  • Adobe Acrobat Reader Continuous logoAdobe Acrobat Reader Continuous
  • cpe:2.3:a:adobe:acrobat_dc
NoYesJun 23, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

Cloud Threat Landscape

A threat intelligence database

PEACH

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management
Get a demo