Adobe Reader and Acrobat Sandbox Bypass Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Aug 12, 2014 · Catalog

   Detected

   Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.

2. May 25, 2022 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Jun 15, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.

Affected

• cpe adobe/acrobatversion unspecified
• cpe adobe/acrobat readerversion unspecified
• vendor Adobe Reader and Acrobatversion unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2014-0546

  Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.

  cisa.gov
• CVE.orgVulnerability recordCVE-2014-0546

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2014-0546

  30-day exploitation probability 22.3%

  first.org
• NIST NVDVulnerability recordCVE-2014-0546

  Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.

  nvd.nist.gov

References

• Patch · helpx.adobe.com
• Broken Link · securitytracker.com
• Issue Tracking · github.com
• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov