Design/Logic Flaw

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability in the processing of the acroform event that could result in arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2022-28838

CVE-2022-28838 affects Adobe Acrobat Pro DC (versions 22.001.2011x and earlier; 20.005.3033x and earlier; 17.012.3022x and earlier). It is a use-after-free vulnerability in a component used during PDF processing that could allow arbitrary code execution in the current user context. Exploitation r...

CVE-2022-28838 Adobe Acrobat Pro DC Doc flattenPages Use-After-Free Remote Code Execution Vulnerability

Acrobat Acrobat Pro DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in...

CVE-2022-28837

CVE-2022-28837 affects Adobe Acrobat Pro DC: use-after-free in Doc buttonSetIcon handling leading to possible memory disclosure and ASLR bypass. Affected: Acrobat Pro DC 22.001.2011x and earlier, 20.005.3033x and earlier, 17.012.3022x and earlier. Exploitation requires user interaction (open a ma...

CVE-2022-28269

CVE-2022-28269 affects Adobe Acrobat Reader DC and older Adobe Acrobat/Reader builds. The issue is a use-after-free in the processing of Annotation objects that can cause a memory leak in the context of the current user. Exploitation requires user interaction (victim opens a crafted file). Affect...

CVE-2022-28267

CVE-2022-28267 affects Adobe Acrobat Reader DC and related products when parsing a crafted file, causing an out-of-bounds read that can bypass ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. The issue requires use...

CVE-2022-28266 Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28266

CVE-2022-28266 affects Acrobat Reader DC and related Adobe products. The issue is an out-of-bounds read when parsing crafted PDF/files, potentially allowing read past end of an allocated memory structure and bypassing mitigations such as ASLR. Exploitation requires user interaction (the victim mu...

CVE-2022-28263 Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28261

Vulnerability summary: Acrobat Reader DC and related Adobe products suffer an out-of-bounds read when parsing a crafted file, potentially allowing bypass of mitigations such as ASLR. Affected software (examples from sources): Acrobat Reader DC 22.001.2011x and earlier; 20.005.3033x and earlier; 1...

CVE-2022-28261 Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28259

Technical details for CVE-2022-28259 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-28258

CVE-2022-28258 affects Adobe Acrobat/Reader: an out-of-bounds read during parsing of crafted files can read past allocated memory, potentially bypassing ASLR. Affected are Acrobat Reader DC 22.001.2011x and earlier, Acrobat Reader/Classic 20.x 20.005.3033x and earlier, and Acrobat/Reader 17.x 17....

CVE-2022-28256

Technical details of CVE-2022-28256 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2022-28250 Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio...

CVE-2022-28249

CVE-2022-28249 affects Acrobat Reader DC and related Adobe products (versions listed) with an out-of-bounds read during parsing of a crafted PDF/file, allowing a read past the end of a memory structure and potentially bypassing ASLR. Exploitation requires user interaction (victim must open a mali...

CVE-2022-28248 Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28245

CVE-2022-28245 is an out-of-bounds read in Adobe Acrobat/Reader DC when parsing a crafted file, potentially bypassing ASLR. Affected: Acrobat Reader DC 22.001.2011x and earlier; Reader DC 20.005.3033x and earlier; Acrobat 17.012.3022x and earlier. Exploitation requires user interaction (victim op...

CVE-2022-28244 Adobe Acrobat Reader DC CSP Bypass Leads To Privilege Escalation

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier is affected by a violation of secure design principles through bypassing the content security policy, which could result in an attacker sending arbitrarily configured requests to the...

CVE-2022-28244

CVE-2022-28244 (Adobe Acrobat/Reader DC CSP Bypass) affects Acrobat Reader DC with versions up to 22.001.20085, 20.005.3031x, and 17.012.30205 (and earlier). The issue is a violation of secure design principles: bypassing the Content Security Policy, which could let an attacker trigger arbitraril...