Description
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3061, CVE-2015-3062, CVE-2015-3063, CVE-2015-3064, CVE-2015-3065, CVE-2015-3066, CVE-2015-3067, CVE-2015-3068, CVE-2015-3069, CVE-2015-3071, CVE-2015-3072, and CVE-2015-3073.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/74604
Patch, Vendor Advisory x_refsource_confirm
https://helpx.adobe.com/security/products/reader/apsb15-10.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1032284
Third Party Advisory, VDB Entry x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-15-198
Scores
EPSS
0.0992
EPSS Percentile
95.0%
Details
CWE
CWE-284
Status
published
Products (50)
adobe/acrobat
10.1.0
adobe/acrobat
10.1.1
adobe/acrobat
10.1.2
adobe/acrobat
10.1.3
adobe/acrobat
10.1.4
adobe/acrobat
10.1.5
adobe/acrobat
10.1.6
adobe/acrobat
10.1.7
adobe/acrobat
10.1.8
adobe/acrobat
10.1.9
... and 40 more
Published
May 13, 2015
Tracked Since
Feb 18, 2026