CVE-2022-28247: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat Reader DC versions 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier were identified with a security vulnerability tracked as CVE-2022-28247. This vulnerability was disclosed on March 30, 2022, and involves an uncontrolled search path element that could potentially lead to local privilege escalation (CVE Mitre, NVD).

The vulnerability is classified as an uncontrolled search path element (CWE-427) that affects Adobe Acrobat and Reader products. The CVSS v3.1 base score is rated as 7.3 (HIGH) by NVD with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, while Adobe Systems rated it at 6.7 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H (NVD).

If successfully exploited, this vulnerability could lead to local privilege escalation, potentially allowing an attacker to gain elevated system privileges. The vulnerability affects both Windows and macOS operating systems running the vulnerable versions of Adobe Acrobat and Reader (NVD).

Adobe has addressed this vulnerability through security updates. Users are advised to update their Adobe Acrobat and Reader installations to the latest versions available through the official Adobe update channels (Adobe Advisory).