CVE-2022-27794: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability
Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by the use of a variable that has not been initialized when processing of embedded fonts, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .pdf file
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-27794?
CVE-2022-27794 is considered a critical vulnerability due to its potential to allow arbitrary code execution.
Which versions of Adobe products are affected by CVE-2022-27794?
CVE-2022-27794 affects Adobe Acrobat Reader DC versions up to 22.001.20085 and earlier, along with several other specified versions of Acrobat and Acrobat Reader.
How do I fix CVE-2022-27794?
To fix CVE-2022-27794, upgrade to the latest versions of the affected Adobe software as detailed in the security advisory.
Can CVE-2022-27794 be exploited remotely?
Yes, CVE-2022-27794 can potentially be exploited remotely through specially crafted PDF files.
What is the impact of CVE-2022-27794 on users?
The impact of CVE-2022-27794 on users includes the possibility of arbitrary code execution, which could lead to unauthorized access or manipulation of data.