CVE-2014-8452

No fix known EPSS 18%

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Published 2014-12-10 · CVE record · OSV

Products: adobe acrobat_reader, apple mac_os_x, microsoft windows, adobe acrobat