CVE-2020-9720: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier were found to contain an out-of-bounds read vulnerability (CVE-2020-9720). The vulnerability was disclosed on March 2, 2020, and affects both Windows and macOS operating systems (CVE Details).

The vulnerability is classified as an out-of-bounds read issue (CWE-125). It received a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating that it is network-accessible, requires low attack complexity, and needs no privileges or user interaction to exploit (NVD).

Successful exploitation of this vulnerability could lead to information disclosure. The high confidentiality impact rating in the CVSS score suggests that the attacker could gain access to sensitive information through the out-of-bounds read vulnerability (NVD).

The vulnerability has a network attack vector with low attack complexity and requires no privileges or user interaction, making it relatively straightforward to exploit. The CVSS metrics indicate that the vulnerability is accessible over the network and can be exploited without special conditions (NVD).

Adobe has released security updates to address this vulnerability. Users should update to versions newer than those affected: 2020.009.20074 for continuous track and 2020.001.30002, 2017.011.30171, and 2015.006.30523 for classic track (Adobe Advisory).