CVE-2022-28240: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat Reader DC versions 22.001.2011x (and earlier), 20.005.3033x (and earlier), and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability. This security flaw was assigned CVE-2022-28240 and requires user interaction, specifically opening a malicious file, to be exploited (CVE Mitre).

The vulnerability is classified as a use-after-free (CWE-416) issue with a CVSS score of 7.8, rated as Critical. The CVSS vector string is CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access, low attack complexity, no privileges required, user interaction required, and high impacts on confidentiality, integrity, and availability (Adobe Security).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. The attacker could potentially gain the same rights and access as the compromised user (NVD).

Adobe has released security updates to address this vulnerability. Users should update their Adobe Acrobat Reader DC to versions newer than 22.001.2011x, 20.005.3033x, or 17.012.3022x depending on their installation track (Adobe Security).