CVE-2020-9723: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier were found to contain an out-of-bounds read vulnerability. The vulnerability was discovered by Steven Seeley of Qihoo 360 Vulcan Team and was assigned CVE-2020-9723. The issue was publicly disclosed on August 19, 2020 (NVD, Adobe Advisory).

The vulnerability is classified as an out-of-bounds read (CWE-125) issue. According to the National Vulnerability Database, it received a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating that it is network-accessible, requires low attack complexity, needs no privileges or user interaction, and can result in high confidentiality impact (NVD).

Successful exploitation of this vulnerability could lead to information disclosure. The high CVSS confidentiality impact score indicates that the vulnerability could allow unauthorized access to sensitive data (NVD).

Adobe has addressed this vulnerability in updated versions of the affected software. Users should upgrade to versions newer than those listed as vulnerable: 2020.009.20074, 2020.001.30002, 2017.011.30171, and 2015.006.30523 (Adobe Advisory).