CVE-2022-27794
High · 7.8CVSS
7.8
EPSS
14.3%
Published
May 11, 2022
CISA due date
—
The record
Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by the use of a variable that has not been initialized when processing of embedded fonts, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .pdf file
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-115327 libyang through 6.4.13 contains an uninitialized pointer free vulnerability in… CWE-824
- CVE-2026-109618 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort… CWE-824
- CVE-2026-109619 PHP has various global state that temporarily points into request memory. CWE-824
- CVE-2026-88054 Tesseract is an open source OCR engine. CWE-824
- CVE-2026-54920 OpenEXR is the reference implementation and specification for the EXR image format… CWE-824
- CVE-2026-16409 Invalid pointer in the Security: PSM component. CWE-824
- CVE-2026-16353 Invalid pointer in the DOM: Bindings (WebIDL) component. CWE-824
- CVE-2026-47908 Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized… CWE-824