CVE-2022-28838

Acrobat Acrobat Pro DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Score
CVSS 3.1 7.8 High
Status
Modified - psirt@adobe.com
Published
2022-05-11
Last modified
2026-05-27
Weaknesses
CWE-416

Affected products

References