CVE-2020-9602: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier were found to contain an out-of-bounds read vulnerability. The vulnerability was assigned CVE-2020-9602 and was discovered by Zhiyuan Wang and willJ from cdsrc of Qihoo 360 (Adobe Security, CVE Details).

The vulnerability is classified as an out-of-bounds read flaw that could allow attackers to access sensitive information. The issue was addressed in Adobe's May 2020 security update with a CVSS base score of 6.8 (Threatpost, Qualys Alert).

Successful exploitation of this vulnerability could lead to information disclosure, potentially exposing sensitive data to unauthorized actors (CVE Details).

Adobe reported that they were not aware of any exploits in the wild for this vulnerability at the time of patching (Threatpost).

Adobe released patches to address this vulnerability. Users are advised to update to Acrobat DC Continuous version 2020.006.20042 or later, Acrobat 2017 version 2017.011.30166 or later, and Acrobat DC Classic version 2015.006.30518 or later (Adobe Security).