CVE-2020-24428 Acrobat Reader DC for macOS Race Condition Vulnerability Could Lead to Privilege Escalation

🗓️ 05 Nov 2020 19:31:26Reported by adobeType

CVE-2020-24428 Acrobat Reader DC macOS Vulnerabilit

Reporter	Title	Published	Views	Family All 27
Tenable Nessus	Adobe Acrobat < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67)	5 Nov 202000:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67)	5 Nov 202000:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67) (macOS)	5 Nov 202000:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67) (macOS)	5 Nov 202000:00	–	nessus
ATTACKERKB	CVE-2020-24428	3 Nov 202023:00	–	attackerkb
BDU FSTEC	The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are due to the “race-to-privilege” scenario, which allows a malicious actor to escalate their privileges.	8 Dec 202000:00	–	bdu_fstec
CNVD	Adobe Acrobat and Reader Local Elevation of Privilege Vulnerability	4 Nov 202000:00	–	cnvd
CVE	CVE-2020-24428	5 Nov 202019:31	–	cve
EUVD	EUVD-2020-17148	7 Oct 202500:30	–	euvd
Kaspersky	KLA11991 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader	3 Nov 202000:00	–	kaspersky

[
  {
    "product": "Acrobat Reader",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "2017.011.30175",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2020.012.20048",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2020.001.30005",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "None",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb20-67.html

05 Nov 2020 19:31Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.7

EPSS0.01248

CWE-367