CVE-2014-0546

Adobe Reader and Acrobat allowed attackers to bypass sandbox protections and execute privileged native code via CVE-2014-0546.

This sandbox bypass vulnerability enabled remote code execution in a privileged context, directly violating CMMC/NIST 800-171 requirements for preventing unauthorized access and protecting information. DIB organizations must ensure all Adobe products are patched to the latest version, as this class of flaw is a recurring threat vector for ransomware and data exfiltration. The fact that it was added to the CISA KEV catalog confirms it was actively exploited in the wild, making it a high-priority remediation target.

Shame score — Adobe repeatedly ships critical RCE vulnerabilities in its flagship products, demonstrating a pattern of negligence that forces DIB customers to constantly patch or face exploitation.