VULNERABILITY INTELLIGENCE

CVE-2022-27864

CVSS score8.8 HIGH
EPSS probability1.17%
CISA KEVNot currently listed
Published2022-07-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Weakness classification

  • nvd@nist.gov: CWE-415

Primary references