CVE-2023-38223: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability (CVE-2023-38223). The vulnerability was disclosed on July 13, 2023, and affects both the classic and continuous versions of Adobe Acrobat and Acrobat Reader on Windows and macOS systems (NVD Database, CVE MITRE).

The vulnerability is classified as an Access of Uninitialized Pointer (CWE-824) issue. It has received a CVSS v3.1 base score of 7.8 (High), with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. This indicates that the vulnerability requires local access and user interaction, but no privileges, while potentially impacting confidentiality, integrity, and availability at high levels (NVD Database).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. The high CVSS score indicates significant potential impact on system security, affecting confidentiality, integrity, and availability of the system (NVD Database).

Adobe has released security updates to address this vulnerability. Users should update to the latest versions of Adobe Acrobat and Reader that are newer than versions 23.003.20244 and 20.005.30467 (Adobe Advisory).