CVE-2022-28247CWE-427

Adobe Acrobat Uninstaller Hard Link Leads To Remote Code Execution

Medium · published May 11, 2022

CVSS v3.1
6.7
EPSS
0%
Percentile
39.9
In the wild
Unconfirmed
What it is

Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an uncontrolled search path vulnerability that could lead to local privilege escalation. Exploitation of this issue requires user interaction in that a victim must run the uninstaller with Admin privileges.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00473 · 39.9th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2022-05-11T17:42Z
EPSS history
Timeline
  • 11 MAY 17:42Z
    Adobe Acrobat Uninstaller Hard Link Leads To Remote Code Execution
    cvelistv5