CVE-2022-38450: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) were identified with a Stack-based Buffer Overflow vulnerability (CVE-2022-38450). The vulnerability was disclosed on August 18, 2022, and affects Adobe Acrobat Reader software on both Windows and macOS platforms (CVE Details).

The vulnerability is classified as a Stack-based Buffer Overflow with a CVSS score of 7.0 (AV:L/AC:M/Au:N/C:C/I:C/A:C). This indicates a moderate severity level with local access required and medium attack complexity (Rapid7).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. The severity of the impact is heightened by the potential for complete compromise of system confidentiality, integrity, and availability (CVE Details).

Exploitation of this vulnerability requires user interaction, specifically that a victim must open a malicious file. This requirement somewhat mitigates the ease of exploitation but still presents a significant risk in scenarios where users regularly open PDF documents (CVE Details).

Adobe has addressed this vulnerability in their security update APSB22-46. Users are advised to update their Adobe Acrobat Reader installations to versions newer than 22.002.20212 or 20.005.30381 depending on their product version (Adobe Security).