CVE-2022-28261 Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28261

Vulnerability summary: Acrobat Reader DC and related Adobe products suffer an out-of-bounds read when parsing a crafted file, potentially allowing bypass of mitigations such as ASLR. Affected software (examples from sources): Acrobat Reader DC 22.001.2011x and earlier; 20.005.3033x and earlier; 1...

CVE-2022-28259

Technical details for CVE-2022-28259 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-28258

CVE-2022-28258 affects Adobe Acrobat/Reader: an out-of-bounds read during parsing of crafted files can read past allocated memory, potentially bypassing ASLR. Affected are Acrobat Reader DC 22.001.2011x and earlier, Acrobat Reader/Classic 20.x 20.005.3033x and earlier, and Acrobat/Reader 17.x 17....

CVE-2022-28256

Technical details of CVE-2022-28256 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2022-28250 Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio...

CVE-2022-28249

CVE-2022-28249 affects Acrobat Reader DC and related Adobe products (versions listed) with an out-of-bounds read during parsing of a crafted PDF/file, allowing a read past the end of a memory structure and potentially bypassing ASLR. Exploitation requires user interaction (victim must open a mali...

CVE-2022-28248 Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2022-28245

CVE-2022-28245 is an out-of-bounds read in Adobe Acrobat/Reader DC when parsing a crafted file, potentially bypassing ASLR. Affected: Acrobat Reader DC 22.001.2011x and earlier; Reader DC 20.005.3033x and earlier; Acrobat 17.012.3022x and earlier. Exploitation requires user interaction (victim op...

CVE-2022-28244 Adobe Acrobat Reader DC CSP Bypass Leads To Privilege Escalation

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier is affected by a violation of secure design principles through bypassing the content security policy, which could result in an attacker sending arbitrarily configured requests to the...

CVE-2022-28244

CVE-2022-28244 (Adobe Acrobat/Reader DC CSP Bypass) affects Acrobat Reader DC with versions up to 22.001.20085, 20.005.3031x, and 17.012.30205 (and earlier). The issue is a violation of secure design principles: bypassing the Content Security Policy, which could let an attacker trigger arbitraril...

CVE-2022-28243

CVE-2022-28243 concerns an out-of-bounds read in Acrobat Reader DC when parsing a crafted file, potentially allowing code execution in the user’s context. Affected are Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. The issue requires user inter...

CVE-2022-28242

Technical details for CVE-2022-28242 are not provided in the supplied documents. No affected products, impact, or fixes are disclosed here. Monitor official advisories and vendor updates for public details and remediation.

CVE-2022-28241

CVE-2022-28241 affects Adobe Acrobat Reader DC and related Acrobat/Reader builds (e.g., 22.001.2011x and earlier, 20.005.3033x and earlier, 17.012.3022x and earlier). The issue is an out-of-bounds read during parsing of a crafted PDF/file, which can result in a read past the end of an allocated m...

CVE-2022-28240

CVE-2022-28240 affects Adobe Acrobat Reader DC and Acrobat/Reader versions listed in the NVD entry, due to a use-after-free flaw that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. The advisory suggests updating to...

CVE-2022-28240 Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

CVE-2022-28238

CVE-2022-28238 affects Acrobat Reader DC and related Adobe products on multiple versions (e.g., 22.001.20085 and earlier, 20.005.3031x and earlier, 17.012.30205 and earlier). The vulnerability is a use-after-free in the processing of annotations that could allow arbitrary code execution in the co...

CVE-2022-28237

CVE-2022-28237 affects Acrobat Reader DC and related Adobe products. A use-after-free in the processing of annotations could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Affected versions include Ac...

CVE-2022-28235

CVE-2022-28235 affects Adobe Acrobat Reader DC and related Acrobat/Reader variants. It is a use-after-free vulnerability in the processing of the acroform event that could allow arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file)...

CVE-2022-28234 Adobe Acrobat Reader DC Heap Overflow Could Lead to RCE

Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier is affected by a heap-based buffer overflow vulnerability due to insecure handling of a crafted .pdf file, potentially resulting in arbitrary code execution in the context of the current use...