CVE-2020-9698: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier were identified with a buffer error vulnerability (CVE-2020-9698). The vulnerability was discovered and assigned on March 2, 2020, and was publicly disclosed on August 19, 2020. This security flaw affects both Windows and macOS operating systems running the specified versions of Adobe Acrobat and Reader (CVE Details).

The vulnerability is classified as a buffer copy without checking size of input, also known as a classic buffer overflow (CWE-120). It received a CVSS v3.1 base score of 7.8 (High) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, and a CVSS v2.0 score of 9.3 (High) with the vector string (AV:N/AC:M/Au:N/C:C/I:C/A:C). The vulnerability requires user interaction for successful exploitation (NVD).

Successful exploitation of this vulnerability could lead to arbitrary code execution on the affected system, potentially allowing an attacker to gain the same privileges as the targeted user. The high CVSS scores indicate severe potential impacts on confidentiality, integrity, and availability of the system (NVD).

The vulnerability requires user interaction for successful exploitation, and the attack complexity is considered low according to the CVSS metrics. No privilege escalation is required for the attack, though local access to the system is necessary (NVD).

Adobe has released security updates to address this vulnerability. Users should update to the latest version of Adobe Acrobat and Reader that is newer than the affected versions listed in the vulnerability overview (Adobe Advisory).