CVE-2022-28259: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

CVE-2022-28259 is an out-of-bounds read vulnerability affecting Adobe Acrobat Reader DC. The vulnerability was discovered and disclosed on May 11, 2022. It affects multiple versions of Adobe Acrobat Reader DC including version 22.001.2011x (and earlier), 20.005.3033x (and earlier), and 17.012.3022x (and earlier) (NVD Results).

The vulnerability is characterized as an out-of-bounds read vulnerability that occurs when parsing a crafted file, which could result in a read past the end of an allocated memory structure. The vulnerability has been assigned a CVSS v2.0 score of 4.3 (MEDIUM) (NVD Results).

The vulnerability could allow an attacker to bypass security mitigations such as Address Space Layout Randomization (ASLR). This could potentially lead to information disclosure and compromise of sensitive memory data (NVD Results).

Exploitation of this vulnerability requires user interaction, specifically that a victim must open a malicious file. The vulnerability cannot be exploited without this user interaction (NVD Results).

Adobe has released security updates to address this vulnerability. Users should update to the latest versions of their respective Adobe Acrobat and Reader products (Adobe Security).