Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2020-24433

Adobe Acrobat Reader DC Local Privilege Escalation via Installer Component

Description

Adobe Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a local privilege escalation vulnerability that could enable a user without administrator privileges to delete arbitrary files and potentially execute arbitrary code as SYSTEM. Exploitation of this issue requires an attacker to socially engineer a victim, or the attacker must already have some access to the environment.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Acrobat Reader

  • unspecified to ≤ 2017.011.30175affected
  • unspecified to ≤ 2020.012.20048affected
  • unspecified to ≤ 2020.001.30005affected
  • unspecified to ≤ Noneaffected

References