The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, Adobe Acrobat Reader 2015 are caused by synchronization errors when using a shared resource. This vulnerability allows attackers to circumvent existing security restrictions.

🗓️ 05 Jun 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Adobe Acrobat and Reader vulnerabilities from shared resource sync errors allow remote bypass.

Reporter	Title	Published	Views	Family All 27
Tenable Nessus	Adobe Acrobat < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24)	13 May 202000:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24)	13 May 202000:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24) (macOS)	13 May 202000:00	–	nessus
Tenable Nessus	Adobe Reader < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24) (macOS)	13 May 202000:00	–	nessus
CNVD	Competitive Condition Vulnerability for Multiple Adobe Products	13 May 202000:00	–	cnvd
CNVD	Adobe Acrobat and Reader are vulnerable to logic flaws	18 Jun 202000:00	–	cnvd
CVE	CVE-2020-9615	25 Jun 202021:21	–	cve
Cvelist	CVE-2020-9615	25 Jun 202021:21	–	cvelist
EUVD	EUVD-2020-30404	7 Oct 202500:30	–	euvd
Kaspersky	KLA11780 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader	12 May 202000:00	–	kaspersky

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb20-24.html
cisecurity	www.cisecurity.org/advisory/multiple-vulnerabilities-in-adobe-acrobat-and-adobe-reader-could-allow-for-arbitrary-code-execution_2020-065/
web	www.web.nvd.nist.gov/view/vuln/detail

15 Feb 2021 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 38.8

CVSS 210

EPSS0.01892

adobe acrobat reader vulnerabilities shared resource synchronization errors remote bypass security restrictions