CVE-2020-9704: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier were found to contain a buffer error vulnerability identified as CVE-2020-9704. The vulnerability was disclosed on August 19, 2020, and affects multiple versions of Adobe's PDF handling software (NVD, CVE Mitre).

The vulnerability is classified as a buffer error (CWE-120: Buffer Copy without Checking Size of Input) that could potentially lead to arbitrary code execution. It received a CVSS v3.1 base score of 7.8 (High) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access requirements with user interaction needed (NVD).

Successful exploitation of this vulnerability could lead to arbitrary code execution on affected systems, potentially allowing attackers to take control of the targeted system. The vulnerability received high severity ratings for confidentiality, integrity, and availability impacts (Threatpost).

The vulnerability requires local access and user interaction for successful exploitation. Adobe classified this as a Priority 2 update, indicating that while the product has historically been at elevated risk, there were no known exploits in the wild at the time of patching (Threatpost).

Adobe released patches to address this vulnerability. Users should update to Acrobat DC/Reader version 2020.012.20041, Acrobat/Reader Classic 2020 version 2020.001.30005, Acrobat/Reader Classic 2017 version 2017.011.30175, or Acrobat/Reader Classic 2015 version 2015.006.30527, depending on their installed version (Threatpost).