Vulnerability Database

290,300

Total vulnerabilities in the database

CVE-2022-28244

Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a violation of secure design principles through bypassing the content security policy, which could result in an attacker sending arbitrarily configured requests to the cross-origin attack target domain. Exploitation requires user interaction in which the victim needs to access a crafted PDF file on an attacker's server.

  • Published: May 11, 2022
  • Updated: Apr 14, 2023
  • CVE: CVE-2022-28244
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.3
  • AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
adobe / acrobat_dc 15.008.20082 22.001.20085.x
adobe / acrobat_reader_dc 15.008.20082 22.001.20085.x
adobe / acrobat 17.011.30059 17.012.30205.x
adobe / acrobat_reader 17.011.30059 17.012.30205.x
adobe / acrobat 20.001.30005 20.005.30314.x
adobe / acrobat_reader 20.001.30005 20.005.30314.x
adobe / acrobat 20.001.30005 20.005.30311.x
adobe / acrobat_reader 20.001.30005 20.005.30311.x