CVE-2022-28250: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat Reader DC version 22.001.2011x and earlier versions are affected by a use-after-free vulnerability identified as CVE-2022-28250. The vulnerability was discovered by Mat Powell of Trend Micro Zero Day Initiative and was disclosed on May 11, 2022. This security flaw could potentially lead to the disclosure of sensitive memory information (NVD, Adobe Security).

The vulnerability is classified as a use-after-free issue that could expose sensitive memory information. According to the Common Vulnerability Scoring System (CVSS), it received a score of 8.7 (High), with the following vector: I:H/AV:L/AC:L/S:C/PR:N/A:H/UI:R/C:H (ManageEngine).

If successfully exploited, this vulnerability could lead to the disclosure of sensitive memory information, potentially compromising the security of affected systems (NVD).

Adobe has released security updates to address this vulnerability. Users are advised to update their Adobe Acrobat Reader installations to the latest version. The patch is available through the update AcroRdr2020Upd2000530514_MUI.msp (ManageEngine).