CVE-2022-28263: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

An out-of-bounds read vulnerability was identified in Adobe Acrobat Reader DC affecting multiple versions: 22.001.2011x (and earlier), 20.005.3033x (and earlier), and 17.012.3022x (and earlier). The vulnerability was discovered and assigned CVE-2022-28263, with the record being created on March 30, 2022 (CVE Mitre).

The vulnerability is classified as an out-of-bounds read vulnerability (CWE-125) that occurs when parsing a crafted file. This could result in reading past the end of an allocated memory structure. The vulnerability has been assessed with a CVSS score of 5.5, indicating moderate severity with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N (Adobe Security).

If successfully exploited, this vulnerability could enable an attacker to bypass security mitigations such as Address Space Layout Randomization (ASLR). This could potentially lead to unauthorized access to memory contents (NVD).

Exploitation of this vulnerability requires user interaction, specifically requiring a victim to open a malicious file. No known exploits were reported in the wild at the time of disclosure (CVE Mitre).

Adobe has released security updates to address this vulnerability. Users are advised to update their Adobe Acrobat Reader DC installations to the latest version that includes the fix (Adobe Security).