VULNERABILITY INTELLIGENCE

CVE-2022-28247

CVSS score6.7 MEDIUM
EPSS probability0.47%
CISA KEVNot currently listed
Published2022-05-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an uncontrolled search path vulnerability that could lead to local privilege escalation. Exploitation of this issue requires user interaction in that a victim must run the uninstaller with Admin privileges.

Weakness classification

  • psirt@adobe.com: CWE-427

Primary references