10

CVE-2014-0546

Warning

Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.

Data is provided by the National Vulnerability Database (NVD)
Adobe ≫ Acrobat Version >= 10.0 < 10.1.11
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version >= 11.0 < 11.0.08
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version >= 10.0 < 10.1.11
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version >= 11.0 < 11.0.08
   Microsoft ≫ Windows

25.05.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Adobe Acrobat and Reader Sandbox Bypass Vulnerability

Vulnerability

Adobe Acrobat and Reader on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.

Description

Apply updates per vendor instructions.

Required actions
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 27.56% 0.962
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
http://www.securitytracker.com/id/1030711
Third Party Advisory
Broken Link
VDB Entry