CVE-2022-27789: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability
Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of the acroform event that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-27789?
CVE-2022-27789 has a severity rating that allows it to potentially lead to arbitrary code execution in the context of the current user.
How do I fix CVE-2022-27789?
To fix CVE-2022-27789, users should update Adobe Acrobat and Acrobat Reader DC to the latest versions released after version 22.001.20085.
What versions of Adobe Acrobat are affected by CVE-2022-27789?
CVE-2022-27789 affects Acrobat Reader DC versions 22.001.20085 and earlier, and Acrobat versions 20.005.3031x and 17.012.30205 and earlier.
Can CVE-2022-27789 be exploited remotely?
Yes, CVE-2022-27789 can potentially be exploited remotely if a user opens a malicious PDF file.
What types of systems are affected by CVE-2022-27789?
CVE-2022-27789 affects Adobe Acrobat and Acrobat Reader on various operating systems, including Windows and macOS.