CVE-2022-28235: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability
First published: Wed May 11 2022(Updated: )
Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of the acroform event that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader DC | >=15.008.20082<=22.001.20085 | |
| Adobe Acrobat Reader | >=15.008.20082<=22.001.20085 | |
| macOS | ||
| Microsoft Windows Operating System | ||
| Adobe Acrobat Reader | >=17.011.30059<=17.012.30205 | |
| Adobe Acrobat Reader Notification Manager | >=17.011.30059<=17.012.30205 | |
| Adobe Acrobat Reader | >=20.001.30005<=20.005.30314 | |
| Adobe Acrobat Reader Notification Manager | >=20.001.30005<=20.005.30314 | |
| Adobe Acrobat Reader | >=20.001.30005<=20.005.30311 | |
| Adobe Acrobat Reader Notification Manager | >=20.001.30005<=20.005.30311 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2022-28235?
CVE-2022-28235 is classified as a critical severity vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2022-28235?
To mitigate CVE-2022-28235, update Adobe Acrobat Reader DC to version 22.001.20086 or later.
Which versions of Adobe Acrobat Reader DC are affected by CVE-2022-28235?
CVE-2022-28235 affects versions 22.001.20085 and earlier for Acrobat Reader DC, as well as versions 20.005.3031x and 17.012.30205 and earlier.
What types of systems are vulnerable to CVE-2022-28235?
CVE-2022-28235 impacts Adobe Acrobat Reader DC across different operating systems, including Windows and macOS.
What happens if CVE-2022-28235 is exploited?
Exploitation of CVE-2022-28235 could allow an attacker to execute arbitrary code with the privileges of the current user.
- agent/type
- agent/weakness
- agent/author
- agent/references
- agent/description
- agent/severity
- agent/title
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe acrobat reader dc
- version/adobe acrobat reader dc/15.008.20082
- version/adobe acrobat reader dc/22.001.20085
- canonical/adobe acrobat reader
- version/adobe acrobat reader/15.008.20082
- version/adobe acrobat reader/22.001.20085
- vendor/apple
- canonical/macos
- vendor/microsoft
- canonical/microsoft windows operating system
- version/adobe acrobat reader/17.011.30059
- version/adobe acrobat reader/17.012.30205
- canonical/adobe acrobat reader notification manager
- version/adobe acrobat reader notification manager/17.011.30059
- version/adobe acrobat reader notification manager/17.012.30205
- version/adobe acrobat reader/20.001.30005
- version/adobe acrobat reader/20.005.30314
- version/adobe acrobat reader notification manager/20.001.30005
- version/adobe acrobat reader notification manager/20.005.30314
- version/adobe acrobat reader/20.005.30311
- version/adobe acrobat reader notification manager/20.005.30311