CVE-2014-0566

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-09-17 · updated 2026-06-17
Weakness: CWE-119

Description

Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0565.

Affected products

Adobe Acrobat for Edge: from 10.0 before 10.1.15; from 11.0.0 before 11.0.12 — fixed in 10.1.15, 11.0.12
Adobe Acrobat DC: from 15.006.30033 before 15.006.30060; from 15.007.20033 before 15.008.20082 — fixed in 15.006.30060, 15.008.20082
Adobe Acrobat Reader: from 10.0 before 10.1.15; from 11.0.0 before 11.0.12 — fixed in 10.1.15, 11.0.12
Adobe Acrobat Reader: from 15.006.30033 before 15.006.30060; from 15.007.20033 before 15.008.20082 — fixed in 15.006.30060, 15.008.20082

How to fix

Upgrade to a fixed version: Adobe Acrobat for Edge 10.1.15, 11.0.12; Adobe Acrobat DC 15.006.30060, 15.008.20082; Adobe Acrobat Reader 10.1.15, 11.0.12; Adobe Acrobat Reader 15.006.30060, 15.008.20082. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2014-0566 or the next vulnerability affects your stack