CVE-2022-28248: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat and Reader were found to contain an Out-of-bounds Read vulnerability (CVE-2022-28248). The vulnerability was disclosed on May 11, 2022, affecting Adobe Acrobat Reader DC version 22.001.2011x. This security issue was classified as Important with a CVSS v2.0 score of 4.3 (MEDIUM) (NVD, Adobe Security).

The vulnerability is characterized as an Out-of-bounds Read (CWE-125) with Memory Leak implications. According to the CVSS scoring metrics, it has a base score of 5.5 with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, indicating local access requirements and user interaction for exploitation (Adobe Security).

The vulnerability could potentially allow an attacker to bypass security mitigations such as ASLR (Address Space Layout Randomization). The exploitation requires user interaction, which somewhat limits its potential impact (NVD).

Adobe has addressed this vulnerability through a security update. Users are advised to update to the patched version of Adobe Acrobat and Reader (Adobe Security).