CVE-2014-0546: Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a...

Security readout for executives and security teams

This older Adobe Reader and Acrobat flaw lets an attacker escape a Windows sandbox and run native code with higher privileges after user interaction. It affects legacy 10.x and 11.x releases before Adobe’s fixed versions. CISA lists it as known exploited, so remaining vulnerable installations should be treated as active risk. Exposure is most likely on legacy Windows desktops, VDI images, or unmanaged endpoints still running Adobe Reader or Acrobat 10.x or 11.x below 10.1.11 or 11.0.08. Modern managed environments may still have exposure through old gold images, archived business applications, or unsupported endpoints. Prioritize remediation where legacy Adobe Reader or Acrobat remains in use. This is not a new vulnerability, but known exploitation and high impact make it a material risk on unpatched Windows endpoints, especially where users handle external PDFs. Mitigation focus: Upgrade Adobe Reader/Acrobat 10.x to 10.1.11 or later where still supported.; Upgrade Adobe Reader/Acrobat 11.x to 11.0.08 or later where still supported.; Remove unsupported legacy Adobe Reader/Acrobat versions from Windows endpoints..

Prepared

May 22, 2026, 05:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.