CVE-2020-9636: 
Adobe Framemaker vulnerability analysis and mitigation

Adobe Framemaker versions 2019.0.5 and below contain a critical memory corruption vulnerability identified as CVE-2020-9636. The vulnerability was disclosed in June 2020 and affects Adobe's document processor application (NVD).

The vulnerability is classified as a memory corruption issue with a CVSS v3.1 Base Score of 8.8 (HIGH), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. This indicates the vulnerability is network-accessible, requires low attack complexity, needs no privileges, but does require user interaction (NVD).

Successful exploitation of this vulnerability could lead to arbitrary code execution in the context of the current user, potentially allowing an attacker to take control of the affected system (Threatpost).

The vulnerability requires user interaction to be exploited, typically through opening a specially crafted malicious file or visiting a malicious webpage (Threatpost).

Adobe has released version 2019.0.6 of Framemaker to address this vulnerability. Users of affected versions are strongly encouraged to update to the patched version (NVD).