CVE-2022-27787: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

CVE-2022-27787 is an out-of-bounds write vulnerability affecting Adobe Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier), and 17.012.30205 (and earlier). The vulnerability was discovered and disclosed in March 2022, with the CVE being assigned on March 23, 2022. This security flaw requires user interaction, specifically opening a malicious file, to be exploited (NVD, CVE Mitre).

The vulnerability is classified as an out-of-bounds write issue that could lead to arbitrary code execution in the context of the current user. According to the CVSS scoring, it received a CVSS 3.0 score of 7.8 (High) with the following vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, and a CVSS 2.0 score of 9.3 (High) (Adobe Security).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. This means an attacker could potentially execute malicious code with the same privileges as the user running the Adobe Acrobat Reader application (NVD).

Adobe has released security updates to address this vulnerability. Users should update their Adobe Acrobat Reader DC to versions newer than those affected (22.001.20085, 20.005.3031x, and 17.012.30205) (Adobe Security).