CVE-2020-3742: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat and Reader versions (2019.021.20061 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier) were found to contain a heap overflow vulnerability identified as CVE-2020-3742. The vulnerability was discovered in December 2019 and publicly disclosed on February 11, 2020 (NVD, Adobe Advisory).

The vulnerability is classified as an Out-of-bounds Write (CWE-787) that could lead to heap overflow conditions. It received a Critical severity rating with a CVSS v3.1 Base Score of 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and a CVSS v2.0 score of 10.0 (NVD).

Successful exploitation of this vulnerability could lead to arbitrary code execution on affected systems. The high CVSS scores indicate that the vulnerability can be exploited remotely with low attack complexity and without requiring privileges or user interaction, potentially resulting in complete compromise of confidentiality, integrity, and availability (NVD).

Adobe has released security patches to address this vulnerability through their security bulletin APSB20-05. Users are advised to update to the latest version of Adobe Acrobat and Reader (Adobe Advisory).