CVE-2020-9596

Description

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have a security bypass vulnerability. Successful exploitation could lead to security feature bypass.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.321

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities fixed in Adobe Acrobat Reader DC (Continuous Track) update - All languages (20.009.20063) (APSB20-24)Windows
Multiple vulnerabilities fixed in Adobe Acrobat Reader MUI DC (Continuous Track) update - All languages (20.009.20063) (APSB20-24)Windows
Multiple vulnerabilities fixed in Adobe Acrobat DC Pro and Standard (Continuous Track) update - All languages (20.009.20063) (APSB20-24)Windows
Multiple vulnerabilities fixed in Adobe Acrobat 2017 Pro and Standard (Acrobat 2017 Track) update - All languages (17.011.30171) (APSB20-24)Windows
Multiple vulnerabilities fixed in Adobe Acrobat Reader 2017 MUI (Classic Track) (17.011.30171) (APSB20-24)Windows
Multiple vulnerabilities fixed in Adobe Acrobat DC Pro and Standard (Classic Track) update - All languages (15.006.30523) (APSB20-24)Windows
Multiple vulnerabilities fixed in Adobe Acrobat Reader MUI DC (Classic Track) update - All languages (15.006.30523) (APSB20-24)Windows
Vulnerabilities CVE-2020-9592,CVE-2020-9596 are fixed in Foxit Reader (9.7.2.29539)Windows
Vulnerabilities CVE-2020-9592,CVE-2020-9596 are fixed in Foxit Reader Enterprise (9.7.2.29539)Windows
Vulnerabilities CVE-2020-9592,CVE-2020-9596 are fixed in Foxit PhantomPDF Business 9 (ML) (EXE) (9.7.2.29539)Windows
Vulnerabilities CVE-2020-9592,CVE-2020-9596 are fixed in Foxit PhantomPDF Business 9 (ML) (MSI) (9.7.2.29539)Windows
Vulnerabilities CVE-2020-9592,CVE-2020-9596 are fixed in Foxit PhantomPDF Business 9 (EXE) (9.7.2.29539)Windows
Vulnerabilities CVE-2020-9592,CVE-2020-9596 are fixed in Foxit PhantomPDF Business 9 (MSI) (9.7.2.29539)Windows
Multiple vulnerabilities fixed in Update For Foxit Reader (7.3.4.0311)Windows
Multiple vulnerabilities are fixed in Foxit Reader (10.1.4.37651)Windows
Multiple vulnerabilities are fixed in Foxit Reader (ML) (10.1.4.37651)Windows
Multiple vulnerabilities are fixed in Foxit Reader Enterprise (10.1.4.37651)Windows
Multiple vulnerabilities are fixed in Foxit Reader Enterprise (ML) (10.1.4.37651)Windows
Multiple vulnerabilities are fixed in Foxit Reader (10.1.3.37598)Windows
Multiple vulnerabilities are fixed in Foxit Reader (ML) (10.1.3.37598)Windows
Multiple vulnerabilities are fixed in Foxit Reader Enterprise (10.1.3.37598)Windows
Multiple vulnerabilities are fixed in Foxit Reader Enterprise (ML) (10.1.3.37598)Windows
Multiple vulnerabilities are fixed in Foxit Reader (10.1.0.37527)Windows
Multiple vulnerabilities are fixed in Foxit Reader (ML) (10.1.0.37527)Windows
Multiple vulnerabilities are fixed in Foxit Reader Enterprise (10.1.0.37527)Windows
Multiple vulnerabilities are fixed in Foxit Reader Enterprise (ML) (10.1.0.37527)Windows
Multiple vulnerabilities are fixed in Foxit Reader (10.1.1.37576)Windows
Multiple vulnerabilities are fixed in Foxit Reader (ML) (10.1.1.37576)Windows
Multiple vulnerabilities are fixed in Foxit Reader Enterprise (10.1.1.37576)Windows
Multiple vulnerabilities are fixed in Foxit Reader Enterprise (ML) (10.1.1.37576)Windows
Multiple vulnerabilities are fixed in Foxit Reader (10.0.1.35811)Windows
Multiple vulnerabilities are fixed in Foxit Reader Enterprise (10.0.1.35811)Windows
Multiple vulnerabilities are fixed in Foxit Reader (ML) (10.0.1.35811)Windows
Multiple vulnerabilities are fixed in Foxit Reader Enterprise (ML) (10.0.1.35811)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (EXE) (10.1.5.37672)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (EXE) (10.1.4.37651)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (EXE) (10.1.3.37598)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (EXE) (10.1.0.37527)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (EXE) (10.1.1.37576)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (EXE) (10.1.6.37749)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (EXE) (10.1.7.37777)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (EXE) (10.1.8.37795)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (EXE) (10.1.9.37808)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (EXE) (10.1.10.37854)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (EXE) (10.1.11.37866)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (EXE) (10.1.12.37872)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (EXE) (10.0.1.35811)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (MSI) (10.1.5.37672)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (MSI) (10.1.4.37651)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (MSI) (10.1.3.37598)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (MSI) (10.1.0.37527)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (MSI) (10.1.1.37576)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (MSI) (10.1.6.37749)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (MSI) (10.1.7.37777)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (MSI) (10.1.8.37795)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (MSI) (10.1.9.37808)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (MSI) (10.1.10.37854)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (MSI) (10.1.11.37866)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (MSI) (10.1.12.37872)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (MSI) (10.0.1.35811)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (EXE) (10.1.5.37672)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (EXE) (10.1.4.37651)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (EXE) (10.1.3.37598)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (EXE) (10.1.0.37527)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (EXE) (10.1.1.37576)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (EXE) (10.1.6.37749)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (EXE) (10.1.7.37777)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (EXE) (10.1.8.37795)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (EXE) (10.1.9.37808)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (EXE) (10.1.10.37854)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (EXE) (10.1.11.37866)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (EXE) (10.1.12.37872)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (EXE) (10.0.1.35811)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (MSI) (10.1.5.37672)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (MSI) (10.1.4.37651)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (MSI) (10.1.3.37598)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (MSI) (10.1.0.37527)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (MSI) (10.1.1.37576)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (MSI) (10.1.6.37749)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (MSI) (10.1.7.37777)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (MSI) (10.1.8.37795)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (MSI) (10.1.9.37808)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (MSI) (10.1.10.37854)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (MSI) (10.1.11.37866)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (MSI) (10.1.12.37872)Windows
Multiple vulnerabilities are fixed in Foxit PhantomPDF 10 (ML) (MSI) (10.0.1.35811)Windows
Multiple Vulnerabilities are affected in Adobe Acrobat DC for MAC 15.006.30508Mac
Multiple Vulnerabilities are affected in Adobe Acrobat Reader DC for MAC 19.021.20061Mac
Multiple Vulnerabilities are affected in Adobe Acrobat DC for MAC 17.011.30156Mac
Vulnerabilities CVE-2020-9592,CVE-2020-9596 are fixed in Foxit PDF Reader for Mac 4.0Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-314209Adobe Acrobat Reader DC (Continuous Track) update - All languages (20.009.20063) (APSB20-24)
PATCH-314210Adobe Acrobat Reader MUI DC (Continuous Track) update - All languages (20.009.20063) (APSB20-24)
PATCH-314207Adobe Acrobat DC Pro and Standard (Continuous Track) update - All languages (20.009.20063) (APSB20-24)
PATCH-314205Adobe Acrobat 2017 Pro and Standard (Acrobat 2017 Track) update - All languages (17.011.30171) (APSB20-24)
PATCH-314208Adobe Acrobat Reader 2017 MUI (Classic Track) (17.011.30171) (APSB20-24)
PATCH-314206Adobe Acrobat DC Pro and Standard (Classic Track) update - All languages (15.006.30523) (APSB20-24)
PATCH-314211Adobe Acrobat Reader MUI DC (Classic Track) update - All languages (15.006.30523) (APSB20-24)
PATCH-313763Foxit Reader (9.7.2.29539)
PATCH-313764Foxit Reader Enterprise (9.7.2.29539)
PATCH-313761Foxit PhantomPDF Business 9 (ML) (EXE) (9.7.2.29539)
PATCH-313847Foxit PhantomPDF Business 9 (ML) (MSI) (9.7.2.29539)
PATCH-313760Foxit PhantomPDF Business 9 (EXE) (9.7.2.29539)
PATCH-313762Foxit PhantomPDF Business 9 (MSI) (9.7.2.29539)
PATCH-303284Update For Foxit Reader (7.3.4.0311)
PATCH-611991Adobe Acrobat DC for MAC (25.001.20693)(Deployment-Only)
PATCH-611989Adobe Acrobat Reader DC for MAC (25.001.20693)(Deployment-Only)
PATCH-611991Adobe Acrobat DC for MAC (25.001.20693)(Deployment-Only)
PATCH-347386Foxit Reader (2025.1.0.27937)
PATCH-351917Foxit Reader (ML) (2025.2.1.33197)
PATCH-347385Foxit PDF Reader (MSI) (2025.1.0.27937)
PATCH-351864Foxit PDF Reader (ML) (MSI) (2025.2.0.33046)
PATCH-347386Foxit Reader (2025.1.0.27937)
PATCH-351917Foxit Reader (ML) (2025.2.1.33197)
PATCH-347385Foxit PDF Reader (MSI) (2025.1.0.27937)
PATCH-351864Foxit PDF Reader (ML) (MSI) (2025.2.0.33046)
PATCH-347386Foxit Reader (2025.1.0.27937)
PATCH-351917Foxit Reader (ML) (2025.2.1.33197)
PATCH-347385Foxit PDF Reader (MSI) (2025.1.0.27937)
PATCH-351864Foxit PDF Reader (ML) (MSI) (2025.2.0.33046)
PATCH-347386Foxit Reader (2025.1.0.27937)
PATCH-351917Foxit Reader (ML) (2025.2.1.33197)
PATCH-347385Foxit PDF Reader (MSI) (2025.1.0.27937)
PATCH-351864Foxit PDF Reader (ML) (MSI) (2025.2.0.33046)
PATCH-347386Foxit Reader (2025.1.0.27937)
PATCH-347385Foxit PDF Reader (MSI) (2025.1.0.27937)
PATCH-351917Foxit Reader (ML) (2025.2.1.33197)
PATCH-351864Foxit PDF Reader (ML) (MSI) (2025.2.0.33046)
PATCH-331212Foxit PhantomPDF 10 (EXE) (10.1.12.37872)
PATCH-331212Foxit PhantomPDF 10 (EXE) (10.1.12.37872)
PATCH-331212Foxit PhantomPDF 10 (EXE) (10.1.12.37872)
PATCH-331212Foxit PhantomPDF 10 (EXE) (10.1.12.37872)
PATCH-331212Foxit PhantomPDF 10 (EXE) (10.1.12.37872)
PATCH-331212Foxit PhantomPDF 10 (EXE) (10.1.12.37872)
PATCH-331212Foxit PhantomPDF 10 (EXE) (10.1.12.37872)
PATCH-331212Foxit PhantomPDF 10 (EXE) (10.1.12.37872)
PATCH-331212Foxit PhantomPDF 10 (EXE) (10.1.12.37872)
PATCH-331212Foxit PhantomPDF 10 (EXE) (10.1.12.37872)
PATCH-331212Foxit PhantomPDF 10 (EXE) (10.1.12.37872)
PATCH-331212Foxit PhantomPDF 10 (EXE) (10.1.12.37872)
PATCH-331212Foxit PhantomPDF 10 (EXE) (10.1.12.37872)
PATCH-331215Foxit PhantomPDF 10 (MSI) (10.1.12.37872)
PATCH-331215Foxit PhantomPDF 10 (MSI) (10.1.12.37872)
PATCH-331215Foxit PhantomPDF 10 (MSI) (10.1.12.37872)
PATCH-331215Foxit PhantomPDF 10 (MSI) (10.1.12.37872)
PATCH-331215Foxit PhantomPDF 10 (MSI) (10.1.12.37872)
PATCH-331215Foxit PhantomPDF 10 (MSI) (10.1.12.37872)
PATCH-331215Foxit PhantomPDF 10 (MSI) (10.1.12.37872)
PATCH-331215Foxit PhantomPDF 10 (MSI) (10.1.12.37872)
PATCH-331215Foxit PhantomPDF 10 (MSI) (10.1.12.37872)
PATCH-331215Foxit PhantomPDF 10 (MSI) (10.1.12.37872)
PATCH-331215Foxit PhantomPDF 10 (MSI) (10.1.12.37872)
PATCH-331215Foxit PhantomPDF 10 (MSI) (10.1.12.37872)
PATCH-331215Foxit PhantomPDF 10 (MSI) (10.1.12.37872)
PATCH-331213Foxit PhantomPDF 10 (ML) (EXE) (10.1.12.37872)
PATCH-331213Foxit PhantomPDF 10 (ML) (EXE) (10.1.12.37872)
PATCH-331213Foxit PhantomPDF 10 (ML) (EXE) (10.1.12.37872)
PATCH-331213Foxit PhantomPDF 10 (ML) (EXE) (10.1.12.37872)
PATCH-331213Foxit PhantomPDF 10 (ML) (EXE) (10.1.12.37872)
PATCH-331213Foxit PhantomPDF 10 (ML) (EXE) (10.1.12.37872)
PATCH-331213Foxit PhantomPDF 10 (ML) (EXE) (10.1.12.37872)
PATCH-331213Foxit PhantomPDF 10 (ML) (EXE) (10.1.12.37872)
PATCH-331213Foxit PhantomPDF 10 (ML) (EXE) (10.1.12.37872)
PATCH-331213Foxit PhantomPDF 10 (ML) (EXE) (10.1.12.37872)
PATCH-331213Foxit PhantomPDF 10 (ML) (EXE) (10.1.12.37872)
PATCH-331213Foxit PhantomPDF 10 (ML) (EXE) (10.1.12.37872)
PATCH-331213Foxit PhantomPDF 10 (ML) (EXE) (10.1.12.37872)
PATCH-331214Foxit PhantomPDF 10 (ML) (MSI) (10.1.12.37872)
PATCH-331214Foxit PhantomPDF 10 (ML) (MSI) (10.1.12.37872)
PATCH-331214Foxit PhantomPDF 10 (ML) (MSI) (10.1.12.37872)
PATCH-331214Foxit PhantomPDF 10 (ML) (MSI) (10.1.12.37872)
PATCH-331214Foxit PhantomPDF 10 (ML) (MSI) (10.1.12.37872)
PATCH-331214Foxit PhantomPDF 10 (ML) (MSI) (10.1.12.37872)
PATCH-331214Foxit PhantomPDF 10 (ML) (MSI) (10.1.12.37872)
PATCH-331214Foxit PhantomPDF 10 (ML) (MSI) (10.1.12.37872)
PATCH-331214Foxit PhantomPDF 10 (ML) (MSI) (10.1.12.37872)
PATCH-331214Foxit PhantomPDF 10 (ML) (MSI) (10.1.12.37872)
PATCH-331214Foxit PhantomPDF 10 (ML) (MSI) (10.1.12.37872)
PATCH-331214Foxit PhantomPDF 10 (ML) (MSI) (10.1.12.37872)
PATCH-331214Foxit PhantomPDF 10 (ML) (MSI) (10.1.12.37872)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234