CVE-2022-37367

CVE-2022-37367 is a high-severity vulnerability affecting PDF-XChange Editor, allowing remote code execution. It stems from a read past the end of an allocated buffer when handling crafted AcroForms, requiring user interaction to open a malicious file or visit a malicious page. Successful exploitation could lead to arbitrary code execution in the context of the current process. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and there's no evidence of active exploitation or significant community discussion, its CVSS score of 7.8 indicates a significant risk.