CVE-2022-34228: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability
Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-34228?
CVE-2022-34228 is considered a critical vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2022-34228?
To resolve CVE-2022-34228, update Adobe Acrobat Reader to the latest version that addresses this vulnerability.
Which versions of Adobe Acrobat Reader are affected by CVE-2022-34228?
CVE-2022-34228 affects Adobe Acrobat Reader versions 22.001.20142 and earlier, 20.005.30334 and earlier, and 17.012.30229 and earlier.
What type of vulnerability is CVE-2022-34228?
CVE-2022-34228 is an Access of Uninitialized Pointer vulnerability.
Can CVE-2022-34228 be exploited remotely?
Yes, exploitation of CVE-2022-34228 can occur in the context of the current user, potentially allowing remote code execution.