CVE-2022-28243

CVE-2022-28243 concerns an out-of-bounds read in Acrobat Reader DC when parsing a crafted file, potentially allowing code execution in the user’s context. Affected are Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. The issue requires user inter...

CVE-2022-28242

Technical details for CVE-2022-28242 are not provided in the supplied documents. No affected products, impact, or fixes are disclosed here. Monitor official advisories and vendor updates for public details and remediation.

CVE-2022-28241

CVE-2022-28241 affects Adobe Acrobat Reader DC and related Acrobat/Reader builds (e.g., 22.001.2011x and earlier, 20.005.3033x and earlier, 17.012.3022x and earlier). The issue is an out-of-bounds read during parsing of a crafted PDF/file, which can result in a read past the end of an allocated m...

CVE-2022-28240

CVE-2022-28240 affects Adobe Acrobat Reader DC and Acrobat/Reader versions listed in the NVD entry, due to a use-after-free flaw that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. The advisory suggests updating to...

CVE-2022-28240 Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

CVE-2022-28238

CVE-2022-28238 affects Acrobat Reader DC and related Adobe products on multiple versions (e.g., 22.001.20085 and earlier, 20.005.3031x and earlier, 17.012.30205 and earlier). The vulnerability is a use-after-free in the processing of annotations that could allow arbitrary code execution in the co...

CVE-2022-28237

CVE-2022-28237 affects Acrobat Reader DC and related Adobe products. A use-after-free in the processing of annotations could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Affected versions include Ac...

CVE-2022-28235

CVE-2022-28235 affects Adobe Acrobat Reader DC and related Acrobat/Reader variants. It is a use-after-free vulnerability in the processing of the acroform event that could allow arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file)...

CVE-2022-28234 Adobe Acrobat Reader DC Heap Overflow Could Lead to RCE

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier is affected by a heap-based buffer overflow vulnerability due to insecure handling of a crafted .pdf file, potentially resulting in arbitrary code execution in the context of the current use...

CVE-2022-28233

Adobe Acrobat Reader DC affected by a use-after-free in processing annotations, enabling arbitrary code execution in the current user context. Affected products include Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier; exploitation requir...

CVE-2022-28232

CVE-2022-28232 affects Adobe Acrobat Reader DC and related Acrobat/Reader components. A use-after-free vulnerability in the processing of the collab object can allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious...

CVE-2022-28231

CVE-2022-28231 affects Adobe Acrobat Reader DC and related Acrobat/Reader versions: an out-of-bounds read during doc object processing could allow code execution in the user’s context. A victim must open a crafted file for exploitation, requiring user interaction. Affected versions include Acroba...

CVE-2022-28230

CVE-2022-28230 affects Adobe Acrobat Reader DC and related Acrobat/Reader builds. It is a use-after-free in the acroform event processing that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (open a malicious file). Affected versions...

CVE-2022-27801 Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2022-27800

The CVE-2022-27800 entry describes a use-after-free flaw in Adobe Acrobat/Reader DC related to annotation processing. Affected products include Acrobat Reader DC (versions 22.001.20085 and earlier), 20.005.3031x and 17.012.30205 and earlier. The vulnerability allows arbitrary code execution in th...

CVE-2022-27800 Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2022-27799

CVE-2022-27799 is an Acrobat Reader DC use-after-free vulnerability in the acroform event processing that could allow arbitrary code execution in the context of the current user. Affected versions include Acrobat Reader DC 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and e...

CVE-2022-27798

CVE-2022-27798 is a Adobe Acrobat/Reader DC out-of-bounds write vulnerability that leads to arbitrary code execution in the context of the current user. The issue affects multiple versions of Acrobat Reader DC and Acrobat/Reader across Windows/macOS platforms, with exploitation requiring user int...

CVE-2022-27797

CVE-2022-27797 affects Acrobat Reader DC and related Adobe products. A use-after-free in the processing of annotations can allow arbitrary code execution in the context of the current user. Affected versions include Acrobat Reader DC 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012....

CVE-2022-27796

CVE-2022-27796 affects Adobe Acrobat/Reader DC (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) and is caused by a use-after-free in processing of the acroform event, enabling arbitrary code execution in the user’s context. Exploitation requires user interac...