CVE-2020-3792: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier were affected by a use-after-free vulnerability identified as CVE-2020-3792. The vulnerability was disclosed in March 2020 and received a CVSS v3.1 base score of 9.8 (Critical) (NVD).

The vulnerability is classified as a use-after-free (CWE-416) issue that could potentially lead to arbitrary code execution in the context of the current user. The severity assessment indicates a Critical rating with a CVSS v3.1 base score of 9.8, characterized by the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network accessibility, low attack complexity, and no required privileges or user interaction (NVD).

Successful exploitation of this vulnerability could lead to arbitrary code execution, potentially allowing attackers to execute malicious commands on the affected system (Adobe Advisory, Threatpost).

The vulnerability requires no user interaction or special privileges to exploit, making it particularly dangerous. The attack can be conducted remotely over the network, as indicated by the CVSS metrics (NVD).

Adobe released security updates to address this vulnerability. Users are recommended to upgrade to versions 2020.006.20042 for Acrobat and Reader DC, 2017.011.30166 for Acrobat and Reader 2017, and 2015.006.30518 for Acrobat and Reader 2015 (Bleeping Computer).