Exposures › CVE-2014-0546

CVE-2014-0546

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-05-25

Reference

https://nvd.nist.gov/vuln/detail/CVE-2014-0546

⌖ exploited in the wild shame 50/100 exploited-in-wild

Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.

Players implicated

Adobe · vendor Reader and Acrobat · product

Description

Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.

Affected FedRAMP products 8 in the catalog

Product	Provider	Status	Match
Adobe Acrobat Sign for Government	Adobe	Authorized	vendor-exact · 0.90
Adobe Analytics	Adobe	Authorized	vendor-exact · 0.90
Adobe Campaign	Adobe	Authorized	vendor-exact · 0.90
Adobe Connect Managed Services (ACMS-GC)	Adobe	Authorized	vendor-exact · 0.90
Adobe Creative Cloud for Enterprise	Adobe	Authorized	vendor-exact · 0.90
Adobe Document Cloud (PDF Services & Adobe Sign)	Adobe	Authorized	vendor-exact · 0.90
Adobe Experience Manager Managed Services (AEMMS-GC)	Adobe	Authorized	vendor-exact · 0.90
Adobe Learning Manager	Adobe	Authorized	vendor-exact · 0.90