CVE-2022-28244
published 2022-05-11CVE-2022-28244: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a violation of secure design…
medium6.3CVSS 3.1
AVLACLPRNUIRSCCHINAN
Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a violation of secure design principles through bypassing the content security policy, which could result in an attacker sending arbitrarily configured requests to the cross-origin attack target domain. Exploitation requires user interaction in which the victim needs to access a crafted PDF file on an attacker's server.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | acrobat | 17.011.30059 – 17.012.30205 | — |
| adobe | acrobat | 20.001.30005 – 20.005.30314 | — |
| adobe | acrobat | 20.001.30005 – 20.005.30311 | — |
| adobe | acrobat_dc | 15.008.20082 – 22.001.20085 | — |
| adobe | acrobat_reader | 17.011.30059 – 17.012.30205 | — |
| adobe | acrobat_reader | 20.001.30005 – 20.005.30314 | — |
| adobe | acrobat_reader | 20.001.30005 – 20.005.30311 | — |
| adobe | acrobat_reader | unspecified – 22.001.20085 | — |
| adobe | acrobat_reader_dc | 15.008.20082 – 22.001.20085 | — |