CVE-2014-8455

CRITICAL 10.0CVE-2014-8455 · Published 10/12/2014 · updated 17/06/2026

In short

CVE-2014-8455 is a CRITICAL (CVSS 10.0) vulnerability affecting acrobat (adobe), acrobat reader (adobe).
Chance of exploitation in the next 30 days (EPSS): 8.5%, higher than 95.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
acrobat adobe	`= 10.0= 10.0.1= 10.0.2= 10.0.3= 10.1= 10.1.1= 10.1.10= 10.1.11= 10.1.12= 10.1.2= 10.1.3= 10.1.4= 10.1.5= 10.1.6= 10.1.7= 10.1.8= 10.1.9= 11.0= 11.0.1= 11.0.2= 11.0.3= 11.0.4= 11.0.5= 11.0.6= 11.0.7= 11.0.8= 11.0.9`	No fix yet
acrobat reader adobe	`= 10.0= 10.0.1= 10.0.2= 10.0.3= 10.1= 10.1.1= 10.1.10= 10.1.11= 10.1.12= 10.1.2= 10.1.3= 10.1.4= 10.1.5= 10.1.6= 10.1.7= 10.1.8= 10.1.9= 11.0.0= 11.0.01= 11.0.02= 11.0.03= 11.0.04= 11.0.05= 11.0.06= 11.0.07= 11.0.08= 11.0.09`	No fix yet

Description

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8454 and CVE-2014-9165.

References

helpx.adobe.com/security/products/reader/apsb14-28.html · Vendor Advisory

More vulnerabilities in acrobat

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

acrobat

adobe

= 10.0= 10.0.1= 10.0.2= 10.0.3= 10.1= 10.1.1= 10.1.10= 10.1.11= 10.1.12= 10.1.2= 10.1.3= 10.1.4= 10.1.5= 10.1.6= 10.1.7= 10.1.8= 10.1.9= 11.0= 11.0.1= 11.0.2= 11.0.3= 11.0.4= 11.0.5= 11.0.6= 11.0.7= 11.0.8= 11.0.9

No fix yet

acrobat reader

adobe

= 10.0= 10.0.1= 10.0.2= 10.0.3= 10.1= 10.1.1= 10.1.10= 10.1.11= 10.1.12= 10.1.2= 10.1.3= 10.1.4= 10.1.5= 10.1.6= 10.1.7= 10.1.8= 10.1.9= 11.0.0= 11.0.01= 11.0.02= 11.0.03= 11.0.04= 11.0.05= 11.0.06= 11.0.07= 11.0.08= 11.0.09

No fix yet

More vulnerabilities in acrobat

See all →