CVE-2022-28260: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat Reader DC was found to contain an out-of-bounds read vulnerability (CVE-2022-28260) affecting multiple versions: 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. The vulnerability was discovered and assigned on March 30, 2022, with Adobe releasing security updates in May 2022 (CVE Details, Adobe Security).

The vulnerability is classified as an out-of-bounds read issue (CWE-125) that occurs when parsing a crafted file. This could result in reading past the end of an allocated memory structure. The vulnerability has been assigned a CVSS score of 5.5, with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N (Adobe Security).

When successfully exploited, this vulnerability could allow an attacker to bypass security mitigations such as Address Space Layout Randomization (ASLR). The exploitation requires user interaction, specifically requiring a victim to open a malicious file (CVE Details).

Adobe has released security updates to address this vulnerability. Users are advised to update to the latest version of Adobe Acrobat Reader DC through the official Adobe update channels (Adobe Security).