CVE-2022-42339: Adobe Acrobat

High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days.

Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

• Adobe Acrobat: from 20.001.30005, before 20.005.30407 (fixed in 20.005.30407)
• Adobe Acrobat DC: from 15.008.20082, before 22.003.20258 (fixed in 22.003.20258)
• Adobe Acrobat Reader: from 20.001.30005, before 20.005.30407 (fixed in 20.005.30407)
• Adobe Acrobat Reader DC: from 15.008.20082, before 22.003.20258 (fixed in 22.003.20258)

Published 2022-10-14. Last modified 2026-06-17.