CVE-2014-0546

high-risk

Published 2014-08-12

Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.

Do I need to act?

26.2% chance of exploitation in next 30 days

EPSS score — higher than 74% of all CVEs

CISA KEV: actively exploited in the wild

On the Known Exploited Vulnerabilities catalog — federal agencies must patch

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (2)

Acrobat

Acrobat Reader

Affected Vendors

Adobe

References (6)

Patch http://helpx.adobe.com/security/products/reader/apsb14-19.html

Broken Link http://www.securitytracker.com/id/1030711

Patch http://helpx.adobe.com/security/products/reader/apsb14-19.html

Broken Link http://www.securitytracker.com/id/1030711

https://github.com/cisagov/vulnrichment/issues/199

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-...

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 22/34 · High

Exposure 7/34 · Low