CVE-2014-0546: Adobe Acrobat and Reader Sandbox Bypass Vulnerability

Published Aug 12, 2014
·
Updated

Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.

Other sources

Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.

— CISA

Affected Software

53 affected components
Adobe Acrobat Reader=10.0
Adobe Acrobat Reader=10.0.1
Adobe Acrobat Reader=10.0.2
Adobe Acrobat Reader=10.0.3
Adobe Acrobat Reader=10.1
Adobe Acrobat Reader=10.1.1
Adobe Acrobat Reader=10.1.2
Adobe Acrobat Reader=10.1.3
Adobe Acrobat Reader=10.1.4
Adobe Acrobat Reader=10.1.5
Adobe Acrobat Reader=10.1.6
Adobe Acrobat Reader=10.1.7
Adobe Acrobat Reader=10.1.8
Adobe Acrobat Reader=10.1.9
Adobe Acrobat Reader=10.1.10
Adobe Acrobat Reader=11.0
Adobe Acrobat Reader=11.0.1
Adobe Acrobat Reader=11.0.2
Adobe Acrobat Reader=11.0.3
Adobe Acrobat Reader=11.0.4
Adobe Acrobat Reader Windows=11.0.5
Adobe Acrobat Reader=11.0.6
Adobe Acrobat Reader=11.0.7
Microsoft Windows
Adobe Acrobat=10.0
Adobe Acrobat=10.0.1
Adobe Acrobat=10.0.2
Adobe Acrobat=10.0.3
Adobe Acrobat=10.1
Adobe Acrobat=10.1.1
Adobe Acrobat=10.1.2
Adobe Acrobat=10.1.3
Adobe Acrobat=10.1.4
Adobe Acrobat=10.1.5
Adobe Acrobat=10.1.6
Adobe Acrobat=10.1.7
Adobe Acrobat=10.1.8
Adobe Acrobat=10.1.9
Adobe Acrobat=10.1.10
Adobe Acrobat=11.0
Adobe Acrobat=11.0.1
Adobe Acrobat=11.0.2
Adobe Acrobat=11.0.3
Adobe Acrobat=11.0.4
Adobe Acrobat Windows=11.0.5
Adobe Acrobat=11.0.6
Adobe Acrobat=11.0.7
All of the following
Any of the following
Adobe Acrobat>=10.0<10.1.11
Adobe Acrobat>=11.0<11.0.08
Adobe Acrobat Reader>=10.0<10.1.11
Adobe Acrobat Reader>=11.0<11.0.08
Microsoft Windows
Adobe Reader and Acrobat

Remediation

Patch Available

http://helpx.adobe.com/security/products/reader/apsb14-19.html

Event History

Aug 12, 2014
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:55 PM
RemedyDescriptionSeverityAffected Software
May 25, 2022
Known Exploited
via CISA·12:00 AM
Data Sourced
via CISA·12:00 AM
DescriptionAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What are the affected versions of Adobe Reader and Acrobat for CVE-2014-0546?

CVE-2014-0546 affects Adobe Reader and Acrobat versions 10.x before 10.1.11 and 11.x before 11.0.08.

2

What type of vulnerability is CVE-2014-0546?

CVE-2014-0546 is a security flaw that allows attackers to bypass a sandbox protection mechanism and execute native code in a privileged context.

3

What platforms are affected by CVE-2014-0546?

CVE-2014-0546 specifically affects the Windows platform for Adobe Reader and Acrobat.

4

How can I mitigate CVE-2014-0546?

Mitigation for CVE-2014-0546 involves updating Adobe Reader and Acrobat to versions 10.1.11 or 11.0.08 and later.

5

What is the risk of not addressing CVE-2014-0546?

Failing to address CVE-2014-0546 could allow an attacker to execute arbitrary code on the affected system, potentially leading to data compromise.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203