CVE-2022-28232: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier), and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of the collab object. The vulnerability was assigned CVE-2022-28232 and was disclosed on March 30, 2022, with Adobe releasing security updates in May 2022 (CVE Details, Adobe Security).

The vulnerability is classified as a use-after-free (CWE-416) vulnerability that occurs during the processing of the collab object in Adobe Acrobat Reader. The vulnerability has received a CVSS v3.0 score of 7.8, with the following vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (Adobe Security).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. The high severity rating indicates potential for significant impact on system confidentiality, integrity, and availability (NVD).

Adobe has addressed this vulnerability through security updates. Users are advised to update their Adobe Acrobat Reader DC installations to versions newer than 22.001.20085 for the Continuous track, 20.005.3031x for the Classic 2020 track, or 17.012.30205 for the Classic 2017 track (Adobe Security).