
Cloud Vulnerability DB
A community-led vulnerabilities database
Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier), and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability identified as CVE-2022-34220. The vulnerability was discovered and reported to Adobe Systems Incorporated, with the CVE being created on June 21, 2022 (CVE Details).
The vulnerability is classified as a Use After Free (CWE-416) issue that could lead to arbitrary code execution in the context of the current user. The vulnerability has received a CVSS v3.1 base score of 7.8 (High) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).
If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code on the affected system with the privileges of the current user. The exploitation requires user interaction, specifically requiring a victim to open a malicious file (Check Point).
Adobe has released security updates to address this vulnerability through security bulletin APSB22-32. Users are advised to update their Adobe Acrobat and Reader installations to the latest versions (Adobe Advisory).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."