CVE-2014-0496 Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.
HighCVSS 10.0
EPSS 40.0%
CISA KEV
added 2022-03-03 · due 2022-03-24
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-03
- Due date (FCEB)
- 2022-03-24
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | >= 10.0, < 10.1.9 | 10.1.9 |
| Adobe acrobat | >= 11.0, < 11.0.6 | 11.0.6 |
References
- helpx.adobe.com vendor-advisory
- 1029604 third-party-advisory vdb-entry
- github.com issue-tracking
- www.cisa.gov government-resource us-government-resource