CVE-2022-28248 Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28248

CVE-2022-28248 affects Adobe Acrobat Reader DC and related Acrobat/Reader versions (22.001.2011x and earlier; 20.005.3033x and earlier; 17.012.3022x and earlier) via an out-of-bounds read when parsing crafted files. The root cause is a boundary/ memory structure handling flaw that could allow rea...

CVE-2022-28247

CVE-2022-28247 affects Adobe Acrobat/Reader components: Acrobat Reader DC versions 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier, with an uncontrolled search path vulnerability that could cause local privilege escalation. Exploitation requires user interaction: ...

CVE-2022-28246

Technical details about CVE-2022-28246 are not publicly available in the provided connected documents. Monitor for updates; current sources do not expand on affected products, root cause, or remediation beyond the basic description.

CVE-2022-28246 Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28245

CVE-2022-28245 is an out-of-bounds read in Adobe Acrobat/Reader DC when parsing a crafted file, potentially bypassing ASLR. Affected: Acrobat Reader DC 22.001.2011x and earlier; Reader DC 20.005.3033x and earlier; Acrobat 17.012.3022x and earlier. Exploitation requires user interaction (victim op...

CVE-2022-28245 Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28245 Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28244 Adobe Acrobat Reader DC CSP Bypass Leads To Privilege Escalation

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier is affected by a violation of secure design principles through bypassing the content security policy, which could result in an attacker sending arbitrarily configured requests to the...

CVE-2022-28244 Adobe Acrobat Reader DC CSP Bypass Leads To Privilege Escalation

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier is affected by a violation of secure design principles through bypassing the content security policy, which could result in an attacker sending arbitrarily configured requests to the...

CVE-2022-28244

CVE-2022-28244 (Adobe Acrobat/Reader DC CSP Bypass) affects Acrobat Reader DC with versions up to 22.001.20085, 20.005.3031x, and 17.012.30205 (and earlier). The issue is a violation of secure design principles: bypassing the Content Security Policy, which could let an attacker trigger arbitraril...

CVE-2022-28243

CVE-2022-28243 concerns an out-of-bounds read in Acrobat Reader DC when parsing a crafted file, potentially allowing code execution in the user’s context. Affected are Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. The issue requires user inter...

CVE-2022-28242 Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

CVE-2022-28242

Technical details for CVE-2022-28242 are not provided in the supplied documents. No affected products, impact, or fixes are disclosed here. Monitor official advisories and vendor updates for public details and remediation.

CVE-2022-28241

CVE-2022-28241 affects Adobe Acrobat Reader DC and related Acrobat/Reader builds (e.g., 22.001.2011x and earlier, 20.005.3033x and earlier, 17.012.3022x and earlier). The issue is an out-of-bounds read during parsing of a crafted PDF/file, which can result in a read past the end of an allocated m...

CVE-2022-28240

CVE-2022-28240 affects Adobe Acrobat Reader DC and Acrobat/Reader versions listed in the NVD entry, due to a use-after-free flaw that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. The advisory suggests updating to...

CVE-2022-28240 Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

CVE-2022-28240 Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

CVE-2022-28239 Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28239

CVE-2022-28239 affects Adobe Acrobat/Reader products. An out-of-bounds read occurs while parsing a crafted PDF/file, allowing code execution in the context of the current user. Impacts target Acrobat Reader DC (versions 22.001.2011x and earlier; 20.005.3033x and earlier; 17.012.3022x and earlier)...