Adobe Acrobat Reader: 28 records in one advisory

28 records announced together, published 2022-05-11, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://helpx.adobe.com/security/products/acrobat/apsb22-16.html. That is the CNA's own reference, held in the index, and it is why these records are on one page.

Every CVE we hold for Adobe

What the records offer

No record in this batch publishes a fixed version in held sources.

No record in this batch is listed by CISA in held sources.

1 of 28 record names something of its own. For the other 27, held sources say the same thing about each.

Most commonly mapped weakness across the batch: CWE-125 Out-of-bounds Read (CWE-125).

What this page does not cover

This batch is 28 of the 74 records that cite the same advisory. The other 46 are different findings announced alongside it.

34 of them are on the sibling batch linked below. The remaining 12 are grouped with nothing and have only their own record pages.

Other batches under the same advisory: adobe-apsb22-16-e0acd3f7a1

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2022-28239Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28240Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityCWE-416 Use After Free (CWE-416)

CVE-2022-28241Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Remote Code Execution VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28242Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityCWE-416 Use After Free (CWE-416)

CVE-2022-28243Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Remote Code Execution VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28245Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28246Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28247Adobe Acrobat Uninstaller Hard Link Leads To Remote Code ExecutionCWE-427 Uncontrolled Search Path Element…

CVE-2022-28248Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28249Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28250Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure VulnerabilityCWE-416 Use After Free (CWE-416)

CVE-2022-28251Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28252Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28253Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28254Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28255Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28256Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure VulnerabilityCWE-416 Use After Free (CWE-416)

CVE-2022-28257Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28258Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28259Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28260Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28261Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28262Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28263Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28264Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28265Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28266Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

CVE-2022-28267Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityCWE-125 Out-of-bounds Read (CWE-125)

28 records, read from the index as it stood on 2026-09-20. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.