# CVE-2014-0546

Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.

- Page: https://www.vulneraibility.com/cve/CVE-2014-0546
- CVSS: 9.8
- Known exploited: yes, in CISA KEV since 2022-05-25; CISA due date 2022-06-15
- EPSS: 22.33% (percentile 97.7)
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2025-11-21)
- Published: 2014-08-12

## Affected

- adobe:acrobat
- adobe:acrobat_reader

## References

- [other] http://helpx.adobe.com/security/products/reader/apsb14-19.html
- [other] http://www.securitytracker.com/id/1030711
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0546
- [other] https://github.com/cisagov/vulnrichment/issues/199

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.