CVE-2020-29075: high-severity vulnerability in Adobe Acrobat Reader DC
PDF Injection BlackHat Talk
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.1epss 7.9%
Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) are affected by an information exposure vulnerability, that could enable an attacker to get a DNS interaction and track if the user has opened or closed a PDF file when loaded from the filesystem without a prompt. User interaction is required to exploit this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
Affected products
Adobe · Acrobat Reader DCRelated CVEs — Adobe Acrobat Reader DC
In the same product, most dangerous first.
CVE-2026-34621HIGHAcrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)EPSS 7.2%KEVCVE-2026-34622HIGHAcrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)EPSS 0.4%CVE-2026-27220HIGHAcrobat Reader | Use After Free (CWE-416)EPSS 0.4%CVE-2026-48373HIGHAcrobat Reader | Heap-based Buffer Overflow (CWE-122)EPSS 0.3%CVE-2026-34626MEDIUMAcrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)EPSS 0.3%CVE-2026-47913HIGHAcrobat Reader | Use After Free (CWE-416)EPSS 0.3%