CVE-2022-28253

CVE-2022-28253 is an Adobe Acrobat/Reader DC out-of-bounds read vulnerability affecting multiple older builds of Acrobat Reader DC and Acrobat/Reader Classic lines (e.g., 22.001.2011x, 20.005.3033x, 17.012.3022x and earlier) when parsing a crafted file. The issue can allow reading past the end of...

CVE-2022-28252

Adobe Acrobat Reader DC is affected by an out-of-bounds read vulnerability when parsing a crafted file in versions 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. Exploitation could bypass ASLR and requires user interaction (victim must open a malicious file). Re...

CVE-2022-28252 Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28251

CVE-2022-28251 affects Acrobat Reader DC (versions 22.001.2011x and earlier, 20.005.3033x and earlier, 17.012.3022x and earlier). The issue is an out-of-bounds read when parsing a crafted file, which can lead to reading beyond allocated memory and potentially bypass ASLR. Exploitation requires us...

CVE-2022-28251 Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28250

Adobe Acrobat Reader DC/Acrobat-related components are affected by a use-after-free vulnerability that can disclose memory and bypass ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. Exploitation requires user inte...

CVE-2022-28250 Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio...

CVE-2022-28249 Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28249

CVE-2022-28249 affects Acrobat Reader DC and related Adobe products (versions listed) with an out-of-bounds read during parsing of a crafted PDF/file, allowing a read past the end of a memory structure and potentially bypassing ASLR. Exploitation requires user interaction (victim must open a mali...

CVE-2022-28248 Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28248

CVE-2022-28248 affects Adobe Acrobat Reader DC and related Acrobat/Reader versions (22.001.2011x and earlier; 20.005.3033x and earlier; 17.012.3022x and earlier) via an out-of-bounds read when parsing crafted files. The root cause is a boundary/ memory structure handling flaw that could allow rea...

CVE-2022-28247

CVE-2022-28247 affects Adobe Acrobat/Reader components: Acrobat Reader DC versions 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier, with an uncontrolled search path vulnerability that could cause local privilege escalation. Exploitation requires user interaction: ...

CVE-2022-28246

Technical details about CVE-2022-28246 are not publicly available in the provided connected documents. Monitor for updates; current sources do not expand on affected products, root cause, or remediation beyond the basic description.

CVE-2022-28246 Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28245

CVE-2022-28245 is an out-of-bounds read in Adobe Acrobat/Reader DC when parsing a crafted file, potentially bypassing ASLR. Affected: Acrobat Reader DC 22.001.2011x and earlier; Reader DC 20.005.3033x and earlier; Acrobat 17.012.3022x and earlier. Exploitation requires user interaction (victim op...

CVE-2022-28245 Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28245 Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28244 Adobe Acrobat Reader DC CSP Bypass Leads To Privilege Escalation

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier is affected by a violation of secure design principles through bypassing the content security policy, which could result in an attacker sending arbitrarily configured requests to the...

CVE-2022-28244 Adobe Acrobat Reader DC CSP Bypass Leads To Privilege Escalation

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier is affected by a violation of secure design principles through bypassing the content security policy, which could result in an attacker sending arbitrarily configured requests to the...

CVE-2022-28244

CVE-2022-28244 (Adobe Acrobat/Reader DC CSP Bypass) affects Acrobat Reader DC with versions up to 22.001.20085, 20.005.3031x, and 17.012.30205 (and earlier). The issue is a violation of secure design principles: bypassing the Content Security Policy, which could let an attacker trigger arbitraril...