CVE-2022-28244: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

A security vulnerability identified as CVE-2022-28244 affects Adobe Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier), and 17.012.30205 (and earlier). The vulnerability involves a violation of secure design principles through bypassing the content security policy, which was discovered and disclosed in March 2022 (CVE Mitre).

The vulnerability is characterized by a content security policy bypass that could enable an attacker to send arbitrarily configured requests to cross-origin attack target domains. The vulnerability has been assigned a CVSS score indicating medium severity with the following vector: (AV:N/AC:M/Au:N/C:P/I:N/A:N) (Rapid7).

If successfully exploited, this vulnerability could allow an attacker to send arbitrarily configured requests to the cross-origin attack target domain, potentially compromising the security of the affected systems (CVE Mitre).

Adobe has addressed this vulnerability in their security update APSB22-16. Users are advised to update to the latest version of Adobe Acrobat Reader to mitigate this security risk (Adobe Security).