CVE-2022-28236: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

CVE-2022-28236 is an out-of-bounds write vulnerability affecting Adobe Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier), and 17.012.30205 (and earlier). The vulnerability was disclosed on May 11, 2022, and requires user interaction through opening a malicious file for exploitation (NVD).

The vulnerability is classified as an out-of-bounds write vulnerability with a CVSS v3.1 base score of 7.8 (High) and a CVSS v2.0 score of 9.3 (High). The CVSS vector string is CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access, low attack complexity, no privileges required, and user interaction required (NVD).

Successful exploitation of this vulnerability could result in arbitrary code execution in the context of the current user. This means an attacker could potentially execute malicious code with the same privileges as the user running the Adobe Acrobat Reader application (Adobe Advisory, Check Point).

Adobe has released security updates to address this vulnerability. Users are advised to update their Adobe Acrobat and Reader installations to the latest versions available through the security bulletin APSB22-16 (Adobe Advisory).