CVE-2023-29303: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file (CVE Mitre, NVD).

The vulnerability is classified as a Use After Free (CWE-416) issue. It has been assigned a CVSS v3.1 Base Score of 5.5 (MEDIUM) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. This indicates local access is required, low attack complexity, no privileges required, user interaction is required, scope is unchanged, with high confidentiality impact but no impact on integrity or availability (NVD).

The vulnerability can lead to disclosure of sensitive memory and could potentially be used to bypass security mitigations such as Address Space Layout Randomization (ASLR). The impact is primarily focused on confidentiality, with no direct impact on system integrity or availability (NVD).

Adobe has addressed this vulnerability in their security update APSB23-30. Users should update to the latest version of Adobe Acrobat and Reader to mitigate this vulnerability (Adobe Advisory).