CVE-2020-9594: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier were found to contain an out-of-bounds write vulnerability. The vulnerability was disclosed on June 25, 2020, and was assigned the identifier CVE-2020-9594. This critical security flaw affects multiple versions of Adobe's PDF handling software products (NVD, Adobe Advisory).

The vulnerability is classified as an out-of-bounds write issue (CWE-787). It received a CVSS v3.1 base score of 7.8 (High), with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The CVSS v2.0 score was rated at 6.8 (Medium) with the vector (AV:N/AC:M/Au:N/C:P/I:P/A:P) (NVD).

Successful exploitation of this vulnerability could lead to arbitrary code execution in the context of the current user. The flaw could potentially allow attackers to execute malicious code on affected systems, compromising the confidentiality, integrity, and availability of the system (Threatpost).

At the time of disclosure, Adobe stated they were not aware of any exploits in the wild targeting this vulnerability (Threatpost).

Adobe addressed this vulnerability by releasing security updates for the affected versions. Users are advised to update to the patched versions of the software. The fix was part of Adobe's regularly scheduled security update (Adobe Advisory).