CVE-2023-38242: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. The vulnerability was disclosed on August 8, 2023, and is tracked as CVE-2023-38242 (NVD, Adobe Advisory).

The vulnerability is classified as an out-of-bounds read issue (CWE-125) that could potentially expose sensitive memory information. The vulnerability has received a CVSS v3.1 Base Score of 5.5 (Medium) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. This indicates that the vulnerability requires local access and user interaction, has no privileges required, and can lead to high confidentiality impact (NVD).

The vulnerability could allow an attacker to bypass security mitigations such as Address Space Layout Randomization (ASLR). The successful exploitation could lead to the disclosure of sensitive memory information, potentially compromising system security (Adobe Advisory).

Adobe has released security updates to address this vulnerability. Users should update to the latest version of Adobe Acrobat and Reader to mitigate this security risk (Adobe Advisory).