Use-after-free Vulnerability in Adobe Acrobat Reader DC

CVE-2022-44520

Summary

CVE-2022-44520 identifies a critical use-after-free vulnerability present in Adobe Acrobat Reader DC versions 22.001.20085 and earlier, including versions 20.005.3031x and 17.012.30205. This vulnerability poses a significant risk as it allows for arbitrary code execution within the context of the current user when a malicious PDF file is opened. Exploitation of this vulnerability requires user interaction, meaning that a victim must inadvertently open a compromised file, potentially compromising their system. Adobe has provided security updates to mitigate this vulnerability, and it is highly recommended for users to update their software immediately to prevent possible exploitation.

References