CVE-2015-4446: Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic...

Security readout for executives and security teams

This 2015 Adobe Reader and Acrobat flaw could let an attacker bypass intended restrictions, moving code or actions from Low Integrity to Medium Integrity. The bundle does not provide CVSS data, specific vectors, or evidence of active exploitation. Likely exposure is legacy endpoints or servers that still have the affected Adobe Reader or Acrobat versions installed on Windows or OS X. Current, supported installations should be verified against Adobe’s fixed version guidance. Treat this as a legacy hygiene issue unless affected versions remain in production. If they do, remediation matters because the flaw weakens Adobe’s intended containment boundaries. Mitigation focus: Upgrade affected Adobe Reader and Acrobat versions to Adobe’s fixed releases or later.; Remove unsupported legacy Reader or Acrobat installations where business use no longer requires them.; Check Adobe’s APSB15-15 advisory for vendor-specific update guidance..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.