Adobe Reader and Acrobat Sandbox Bypass Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 25/05/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| acrobat | ≥ 10.0, < 10.1.11≥ 11.0, < 11.0.08 | 10.1.1111.0.08 |
| acrobat reader | ≥ 10.0, < 10.1.11≥ 11.0, < 11.0.08 | 10.1.1111.0.08 |
Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free