Use-After-Free Vulnerability in Adobe Acrobat Reader

CVE-2022-44519

Summary

CVE-2022-44519 is a crucial use-after-free vulnerability affecting Adobe Acrobat Reader DC, potentially leading to the unauthorized disclosure of sensitive memory information. The vulnerability impacts versions of the software prior to 22.001.20085, 20.005.3031x, and 17.012.30205. To exploit this vulnerability, an attacker must convince a user to open a malicious PDF file, thereby bypassing security mitigations such as Address Space Layout Randomization (ASLR). This poses a significant risk for user data and system integrity, emphasizing the importance of timely updates to safeguard against such threats.

References