CVE-2022-27798: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

An out-of-bounds write vulnerability (CVE-2022-27798) was identified in Adobe Acrobat Reader DC, affecting versions 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. The vulnerability was discovered and disclosed in March 2022, with Adobe releasing security updates to address the issue (Adobe Advisory).

The vulnerability is classified with a CVSS base score of 9.0 (Critical) with the vector string (AV:N/AC:M/Au:N/C:C/I:C/A:C). The issue stems from an out-of-bounds write condition that could be exploited through user interaction, specifically requiring a victim to open a malicious file (NVD, Rapid7).

Successful exploitation of this vulnerability could result in arbitrary code execution in the context of the current user. This means an attacker could potentially execute malicious code with the same privileges as the user running the Adobe Acrobat Reader application (Adobe Advisory).

Adobe has released security updates to address this vulnerability. Users are advised to update to the latest version of Adobe Acrobat and Reader. The fix is available through Adobe's standard update channels (Adobe Advisory).