Adobe · Reader and Acrobat
CVE-2014-0546
Adobe Reader and Acrobat Sandbox Bypass Vulnerability
What it is
Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.
CISA: Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: June 15, 2022
More exploited flaws from Adobe
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Jun 8, 2022 | Universal 3D Memory Corruption | Reader and Acrobat | High 8.8 | 89% |
| Mar 28, 2022 | Arbitrary Integer Overflow | Reader and Acrobat | High 8.8 | 67% |
| Mar 25, 2022 | Reader and Adobe Acrobat Stack-Based Buffer Overflow | Reader and Acrobat | High 8.8 | 97% |
| Mar 3, 2022 | Arbitrary Code Execution | Reader and Acrobat | High 7.8 | 88% |
| Mar 3, 2022 | Memory Corruption | Reader and Acrobat | High 7.8 | 87% |
| Mar 3, 2022 | Memory Corruption | Reader and Acrobat | High 8.8 | 79% |
| Mar 3, 2022 | Use-After-Free | Reader and Acrobat | High 8.8 | 40% |
| Sep 24, 2026 | Commerce and Magento Incorrect Authorization Vulnerability | Commerce and Magento | Critical 9.1 | 90% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.