CVE-2022-35691: Adobe Acrobat

Medium severity, CVSS 5.5. EPSS: 4.4% chance of exploitation in the next 30 days.

Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

• Adobe Acrobat: from 20.001.30005, before 20.005.30407 (fixed in 20.005.30407)
• Adobe Acrobat DC: from 15.008.20082, before 22.003.20258 (fixed in 22.003.20258)
• Adobe Acrobat Reader: from 20.001.30005, before 20.005.30407 (fixed in 20.005.30407)
• Adobe Acrobat Reader DC: from 15.008.20082, before 22.003.20258 (fixed in 22.003.20258)

Published 2022-10-14. Last modified 2026-06-17.