CVE-2022-28245: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

An out-of-bounds read vulnerability (CVE-2022-28245) was discovered in Adobe Acrobat Reader DC, specifically within the handling of Doc objects. The vulnerability was reported on March 2, 2022, and publicly disclosed on April 28, 2022. This security flaw stems from inadequate validation of user-supplied data when parsing crafted files (ZDI Advisory, Adobe Security).

The vulnerability is classified as an Out-of-Bounds Read (CWE-125) issue that occurs due to improper validation of user-supplied data when handling Doc objects. This can result in a read operation past the end of an allocated memory structure. The vulnerability has received varying CVSS scores: a score of 3.3 (AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) according to ZDI, and 5.5 according to Adobe's assessment (ZDI Advisory, Adobe Security).

The vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. The impact is limited to information disclosure, with no direct impact on system integrity or availability (ZDI Advisory).

Adobe has released a security update to address this vulnerability. Users are advised to apply the available patches through the official Adobe update channels (Adobe Security).