CVE-2022-28250

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio...

Design/Logic Flaw

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio...

Design/Logic Flaw

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

Design/Logic Flaw

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

Design/Logic Flaw

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28837

CVE-2022-28837 affects Adobe Acrobat Pro DC: use-after-free in Doc buttonSetIcon handling leading to possible memory disclosure and ASLR bypass. Affected: Acrobat Pro DC 22.001.2011x and earlier, 20.005.3033x and earlier, 17.012.3022x and earlier. Exploitation requires user interaction (open a ma...

CVE-2022-28837 Adobe Acrobat Pro DC Doc buttonSetIcon Use-After-Free Information Disclosure Vulnerability

Acrobat Pro DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation o...

CVE-2022-28268

Acrobat Reader DC and related Adobe Acrobat/Reader versions (DC: 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) are affected by an out-of-bounds read vulnerability that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a craft...

CVE-2022-28267

CVE-2022-28267 affects Adobe Acrobat Reader DC and related products when parsing a crafted file, causing an out-of-bounds read that can bypass ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. The issue requires use...

CVE-2022-28265

Adobe Acrobat Reader DC and related Acrobat components are affected by an out-of-bounds read when parsing crafted PDF files, potentially allowing memory reads past bounds and bypassing ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012...

CVE-2022-28264

CVE-2022-28264 affects Adobe Acrobat/Reader on multiple lines of versions: Acrobat Reader DC 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier). The issue is an out-of-bounds read when parsing a crafted file, which can cause a read past the end of an allocated m...

CVE-2022-28258

CVE-2022-28258 affects Adobe Acrobat/Reader: an out-of-bounds read during parsing of crafted files can read past allocated memory, potentially bypassing ASLR. Affected are Acrobat Reader DC 22.001.2011x and earlier, Acrobat Reader/Classic 20.x 20.005.3033x and earlier, and Acrobat/Reader 17.x 17....

CVE-2022-28257

CVE-2022-28257 affects Adobe Acrobat/Reader products (e.g., Acrobat Reader DC and related classic/continuous lines) with an out-of-bounds read when parsing a crafted file, potentially bypassing ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, a...

CVE-2022-28256 Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio...

CVE-2022-28256

Technical details of CVE-2022-28256 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2022-28255 Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28255

CVE-2022-28255 affects Acrobat Reader DC: versions 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. Root cause is an out-of-bounds read when parsing a crafted file, potentially bypassing ASLR. Exploitation requires user interaction (victim opens a malicious file)....

CVE-2022-28253

CVE-2022-28253 is an Adobe Acrobat/Reader DC out-of-bounds read vulnerability affecting multiple older builds of Acrobat Reader DC and Acrobat/Reader Classic lines (e.g., 22.001.2011x, 20.005.3033x, 17.012.3022x and earlier) when parsing a crafted file. The issue can allow reading past the end of...

CVE-2022-28250

Adobe Acrobat Reader DC/Acrobat-related components are affected by a use-after-free vulnerability that can disclose memory and bypass ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. Exploitation requires user inte...

CVE-2022-28250 Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio...