CVE-2014-0496
high-risk
Published 2014-01-15
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.
Do I need to act?
!
74.7% chance of exploitation in next 30 days
EPSS score — higher than 25% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10
High
NETWORK
/ LOW complexity
Affected Products (1)
Affected Vendors
References (6)
Vendor Advisory
http://helpx.adobe.com/security/products/acrobat/apsb14-01.html
Third Party Advisory
http://www.securitytracker.com/id/1029604
Vendor Advisory
http://helpx.adobe.com/security/products/acrobat/apsb14-01.html
Third Party Advisory
http://www.securitytracker.com/id/1029604
61
/ 100
high-risk
Severity
30/34 · Critical
Exploitability
26/34 · High
Exposure
5/34 · Minimal