CVE-2015-4435: Critical severity adobe acrobat reader vulnerability
Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-4438, CVE-2015-4441, CVE-2015-4445, CVE-2015-4447, CVE-2015-4451, CVE-2015-4452, CVE-2015-5085, and CVE-2015-5086.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4435?
CVE-2015-4435 has been classified as a critical vulnerability that allows attackers to bypass JavaScript API execution restrictions.
How do I fix CVE-2015-4435?
To fix CVE-2015-4435, upgrade Adobe Reader or Acrobat to the latest version available for your operating system.
Which versions of Adobe software are affected by CVE-2015-4435?
CVE-2015-4435 affects Adobe Reader and Acrobat versions 10.x before 10.1.15, 11.x before 11.0.12, and certain versions of Acrobat DC.
Can CVE-2015-4435 be exploited remotely?
Yes, CVE-2015-4435 can be exploited remotely, allowing attackers to execute arbitrary JavaScript in the context of the user through malicious PDF files.
Is Adobe Reader for macOS affected by CVE-2015-4435?
Yes, Adobe Reader for macOS is affected by CVE-2015-4435 if it is running a vulnerable version.