CVE-2014-0546 Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context,....
CriticalCVSS 9.8
EPSS 22.3%
CISA KEV
added 2022-05-25 · due 2022-06-15
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.
CISA Known Exploited Vulnerability
- Date added
- 2022-05-25
- Due date (FCEB)
- 2022-06-15
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | >= 10.0, < 10.1.11 | 10.1.11 |
| Adobe acrobat | >= 11.0, < 11.0.08 | 11.0.08 |
| Adobe Acrobat Reader | >= 10.0, < 10.1.11 | 10.1.11 |
| Adobe Acrobat Reader | >= 11.0, < 11.0.08 | 11.0.08 |
References
- helpx.adobe.com patch vendor-advisory
- 1030711 broken-link third-party-advisory vdb-entry
- github.com issue-tracking
- www.cisa.gov government-resource us-government-resource