CVE-2022-28261: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

CVE-2022-28261 is a security vulnerability affecting Adobe Acrobat and Reader products, specifically Acrobat Reader DC version 22.001.2011x (and earlier) and version 20.005. The vulnerability was disclosed in April 2022 and addressed in Adobe's security update APSB22-16 (Adobe Security).

The vulnerability is classified as an Out-of-bounds Read (CWE-125) with a Memory Leak issue. It has been assigned an Important severity rating with a CVSS score of 5.5 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) (Adobe Security).

The vulnerability could potentially lead to information disclosure and memory leaks in affected Adobe Acrobat and Reader versions. The high confidentiality impact rating suggests that the vulnerability could expose sensitive information if successfully exploited (Adobe Security).

The vulnerability requires local access and user interaction to be exploited, as indicated by the CVSS metrics. No public exploits or active exploitation in the wild have been reported (Adobe Security).

Adobe has released security updates to address this vulnerability. Users are advised to update to the latest versions of affected Adobe Acrobat and Reader products. For Acrobat DC and Acrobat Reader DC, users should update to version 22.001.20112 or later (CERT-FR).