CVE-2020-24439

Acrobat Reader DC for macOS Signature Validation Bypass

State: Published
Severity: 2.8 Low
Published: Nov 5, 2020
Updated: Sep 17, 2024
Reserved: Aug 19, 2020

Description

Acrobat Reader DC for macOS versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a security feature bypass. While the practical security impact is minimal, a defense-in-depth fix has been implemented to further harden the Adobe Reader update process.

Scores

CVSS	Score	Vector	Source
3.1	2.8 Low	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N	adobe

Weaknesses

CWE-347 Improper Verification of Cryptographic Signature (CWE-347)

Affected Products

Product	Versions
Acrobat ReaderAdobe	2017.011.30175 and earlierAffected 2020.012.20048 and earlierAffected 2020.001.30005 and earlierAffected None and earlierAffected

References

https://helpx.adobe.com/security/products/acrobat/apsb20-67.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.