
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2022-28261 is a security vulnerability affecting Adobe Acrobat and Reader products, specifically Acrobat Reader DC version 22.001.2011x (and earlier) and version 20.005. The vulnerability was disclosed in April 2022 and addressed in Adobe's security update APSB22-16 (Adobe Security).
The vulnerability is classified as an Out-of-bounds Read (CWE-125) with a Memory Leak issue. It has been assigned an Important severity rating with a CVSS score of 5.5 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) (Adobe Security).
The vulnerability could potentially lead to information disclosure and memory leaks in affected Adobe Acrobat and Reader versions. The high confidentiality impact rating suggests that the vulnerability could expose sensitive information if successfully exploited (Adobe Security).
Adobe has released security updates to address this vulnerability. Users are advised to update to the latest versions of affected Adobe Acrobat and Reader products. For Acrobat DC and Acrobat Reader DC, users should update to version 22.001.20112 or later (CERT-FR).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."