CVE-2022-27798

CVE-2022-27798 is a Adobe Acrobat/Reader DC out-of-bounds write vulnerability that leads to arbitrary code execution in the context of the current user. The issue affects multiple versions of Acrobat Reader DC and Acrobat/Reader across Windows/macOS platforms, with exploitation requiring user int...

CVE-2022-27797

CVE-2022-27797 affects Acrobat Reader DC and related Adobe products. A use-after-free in the processing of annotations can allow arbitrary code execution in the context of the current user. Affected versions include Acrobat Reader DC 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012....

CVE-2022-27796

CVE-2022-27796 affects Adobe Acrobat/Reader DC (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) and is caused by a use-after-free in processing of the acroform event, enabling arbitrary code execution in the user’s context. Exploitation requires user interac...

CVE-2022-27795 Adobe Acrobat Reader DC AcroForm isDefaultChecked Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability in the processing of the acroform event that could result in arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2022-27794

CVE-2022-27794 affects Adobe Acrobat Reader DC and related products, where a variable not initialized while parsing embedded fonts can lead to arbitrary code execution in the context of the current user. The exploitation requires user interaction (the user must open a crafted PDF). Affected produ...

CVE-2022-27793

CVE-2022-27793 describes a font-parsing out-of-bounds write in Adobe Acrobat/Reader DC. Affected: Acrobat Reader DC 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier. Impact: arbitrary code execution in the context of the current user; exploitation requires user interac...

CVE-2022-27792 Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in...

CVE-2022-27792

CVE-2022-27792 is an out-of-bounds write vulnerability in font parsing that could enable arbitrary code execution under the current user. Affected products include Acrobat Reader DC and older Acrobat/Reader tiers, with exploitation requiring a user to open a malicious file. The issue is supported...

CVE-2022-27791

Adobe Acrobat Reader DC CVE-2022-27791 is a stack-based buffer overflow in font processing that can lead to arbitrary code execution under the current user. Affected versions include 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier. Exploitation requires user interacti...

CVE-2022-27790

CVE-2022-27790 affects Adobe Acrobat Reader DC and related Acrobat/Reader builds. A use-after-free in font processing could allow arbitrary code execution in the context of the current user, requiring user interaction (victim opens a malicious file). Affected versions include Acrobat Reader DC 22...

CVE-2022-27789

Adobe Acrobat Reader DC is affected by CVE-2022-27789: a use-after-free in AcroForm processing could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). References indicate an Adobe APSB22-16 update addressing ...

CVE-2022-27788

The CVE-2022-27788 entry describes an out-of-bounds write in Adobe Acrobat Reader DC affecting versions 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction; a...

CVE-2022-24104 Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC versions 20.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that ...

CVE-2022-24103

CVE-2022-24103 is a use-after-free vulnerability in Acrobat Reader DC affecting versions 20.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. The issue can lead to arbitrary code execution in the user’s context and requires user interaction (victim opens a malicious f...

CVE-2022-24102 Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC versions 20.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that ...

CVE-2022-24102 Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC versions 20.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that ...

CVE-2022-24101 Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability

Acrobat Reader DC versions 20.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitati...

washington.dc.networkofcare.org Cross Site Scripting vulnerability OBB-2614487

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-28260: Out-of-bounds Read

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28258: Out-of-bounds Read

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...