ZeroDay Findings
Sign inSign up

Findings

CVE-2014-0496

Adobe Reader and Acrobat Use-After-Free Vulnerability

Published Jan 15, 2014 · updated Jun 16, 2026 · adobe acrobat

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 15, 2014 · Catalog

    Detected

    Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

  2. Mar 3, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Mar 24, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

Required action

Apply updates per vendor instructions.

CISA due date Mar 24, 2022

Affected

  • cpe adobe/acrobatversion unspecified
  • vendor Adobe Reader and Acrobatversion unspecified

Sources

  • CISA KEVCVE-2014-0496

    Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution.

    cisa.gov
  • CVE.orgCVE-2014-0496

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2014-0496

    30-day exploitation probability 40.0%

    first.org
  • NIST NVDCVE-2014-0496

    Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

    nvd.nist.gov

References