Adobe · Reader and Acrobat
CVE-2014-0496
Adobe Reader and Acrobat Use-After-Free Vulnerability
Exploited in attacks
High 8.8 Attack chance: 40%
What it is
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.
CISA: Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: March 24, 2022
More exploited flaws from Adobe
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Jun 8, 2022 | Universal 3D Memory Corruption | Reader and Acrobat | High 8.8 | 89% |
| May 25, 2022 | Sandbox Bypass | Reader and Acrobat | High 8.8 | 22% |
| Mar 28, 2022 | Arbitrary Integer Overflow | Reader and Acrobat | High 8.8 | 67% |
| Mar 25, 2022 | Reader and Adobe Acrobat Stack-Based Buffer Overflow | Reader and Acrobat | High 8.8 | 97% |
| Mar 3, 2022 | Arbitrary Code Execution | Reader and Acrobat | High 7.8 | 88% |
| Mar 3, 2022 | Memory Corruption | Reader and Acrobat | High 7.8 | 87% |
| Mar 3, 2022 | Memory Corruption | Reader and Acrobat | High 8.8 | 79% |
| Sep 24, 2026 | Commerce and Magento Incorrect Authorization Vulnerability | Commerce and Magento | Critical 9.1 | 90% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.