vciy

Adobe Acrobat and Reader: 24 records in one advisory

24 records announced together, published 2020-06-25, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://helpx.adobe.com/security/products/acrobat/apsb20-24.html. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

No record in this batch publishes a fixed version in held sources.

No record in this batch is listed by CISA in held sources.

4 of 24 records name something of its own. For the other 20, held sources say the same thing about each.

Most commonly mapped weakness across the batch: Out-of-bounds read.

What this page does not cover

Every record citing this advisory is on this page.

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2020-9592no title heldSecurity bypass
CVE-2020-9593no title heldInvalid memory access
CVE-2020-9594no title heldOut-of-bounds write
CVE-2020-9595no title heldInvalid memory access
CVE-2020-9596no title heldSecurity bypass
CVE-2020-9597no title heldOut-of-bounds write
CVE-2020-9598no title heldInvalid memory access
CVE-2020-9599no title heldOut-of-bounds read
CVE-2020-9600no title heldOut-of-bounds read
CVE-2020-9601no title heldOut-of-bounds read
CVE-2020-9602no title heldOut-of-bounds read
CVE-2020-9603no title heldOut-of-bounds read
CVE-2020-9604no title heldBuffer error
CVE-2020-9605no title heldBuffer error
CVE-2020-9606no title heldUse-after-free
CVE-2020-9607no title heldUse-after-free
CVE-2020-9608no title heldOut-of-bounds read
CVE-2020-9609no title heldOut-of-bounds read
CVE-2020-9610null pointerNull Pointer
CVE-2020-9611stack exhaustionStack exhaustion
CVE-2020-9612heap overflowHeap Overflow
CVE-2020-9613no title heldSecurity bypass
CVE-2020-9614no title heldSecurity bypass
CVE-2020-9615race conditionRace Condition

24 records, read from the index as it stood on 2026-09-20. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.