CVE-2022-44512: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability identified as CVE-2022-44512. This vulnerability was discovered and reported by kdot working with Trend Micro Zero Day Initiative (Adobe Advisory).

The vulnerability is classified as an out-of-bounds write (CWE-787) that could result in arbitrary code execution in the context of the current user. It has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).

Successful exploitation of this vulnerability could lead to arbitrary code execution in the context of the current user. The vulnerability requires user interaction, specifically requiring a victim to open a malicious file (Adobe Advisory).

Adobe has released security updates to address this vulnerability. Users are recommended to update their software installations to the latest versions through the Help > Check for Updates menu option or by downloading the full installer from the Acrobat Reader Download Center. For IT administrators in managed environments, updates can be deployed via preferred methodologies such as AIP-GPO, bootstrapper, SCUP/SCCM for Windows, or Apple Remote Desktop and SSH for macOS (Adobe Advisory).