Windows apps · Application version · April 7, 2022

Adobe Acrobat Reader DC 22.001.20117

Adobe Acrobat Reader DC 22.001.20117, released April 7, 2022, fixes 74 CVEs in Adobe Acrobat Reader DC. None of them is reported as exploited. Patch Radar priority: High. The latest Adobe Acrobat Reader DC is 26.002.22031, which also fixes every one of these CVEs.

High

Superseded. The latest Adobe Acrobat Reader DC is 26.002.22031, which also fixes every CVE on this page. Install that instead.

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

7.8

Base score, 0 to 10

Highest EPSS

0.1879

97th percentile

Priority of the 74 CVEs

Patch now 0
                                Urgent 0
                                High 43
                                Routine 31

Applies to

Product	Version
Adobe Acrobat Reader DC	22.001.20117

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2022-27799	Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability	7.8	0.1879	None reported
High	CVE-2022-27791	Adobe Acrobat Reader DC Font Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability	7.8	0.1781	None reported
High	CVE-2022-27794	Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability	7.8	0.1427	None reported
High	CVE-2022-24102	Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability	7.8	0.1256	None reported
High	CVE-2022-27785	Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability	7.8	0.1251	None reported
High	CVE-2022-27796	Adobe Acrobat Reader DC AcroForm isBoxChecked Use-After-Free Remote Code Execution Vulnerability	7.8	0.1251	None reported
High	CVE-2022-28230	Adobe Acrobat Reader DC AcroForm calculateNow Use-After-Free Remote Code Execution Vulnerability	7.8	0.1251	None reported
High	CVE-2022-28232	Adobe Acrobat Reader DC Collab Object Use-After-Free Information Disclosure Vulnerability	7.8	0.1251	None reported
High	CVE-2022-28233	Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability	7.8	0.1251	None reported
High	CVE-2022-28240	Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability	7.8	0.1249	None reported
High	CVE-2022-27786	Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability	7.8	0.1212	None reported
High	CVE-2022-27790	Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability	7.8	0.1191	None reported
High	CVE-2022-28238	Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability	7.8	0.1191	None reported
High	CVE-2022-28236	Adobe Acrobat Reader DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8	0.1164	None reported
High	CVE-2022-24104	Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability	7.8	0.1109	None reported
High	CVE-2022-28243	Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability	7.8	0.1097	None reported
High	CVE-2022-27787	Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8	0.1033	None reported
High	CVE-2022-27792	Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8	0.0983	None reported
High	CVE-2022-27793	Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8	0.0983	None reported
High	CVE-2022-28234	Adobe Acrobat Reader DC Heap Overflow Could Lead to RCE	7.8	0.0529	None reported
High	CVE-2022-27800	Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability	7.8	0.0407	None reported
High	CVE-2022-27795	Adobe Acrobat Reader DC AcroForm isDefaultChecked Use-After-Free Remote Code Execution Vulnerability	7.8	0.0405	None reported
High	CVE-2022-27797	Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability	7.8	0.0405	None reported
High	CVE-2022-27801	Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability	7.8	0.0405	None reported
High	CVE-2022-27802	Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability	7.8	0.0405	None reported

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/windows-app/adobe.acrobat.reader.32-bit-22.001.20117">Adobe Acrobat Reader DC 22.001.20117 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Is it current everywhere?

Patchblox finds every install below the fixed version, including per-user copies, and updates them from a signed catalog package.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.