VULNERABILITY INTELLIGENCE
CVE-2015-3067
CVSS score10 HIGH
EPSS probability9.92%
CISA KEVNot currently listed
Published2015-05-13
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3061, CVE-2015-3062, CVE-2015-3063, CVE-2015-3064, CVE-2015-3065, CVE-2015-3066, CVE-2015-3068, CVE-2015-3069, CVE-2015-3071, CVE-2015-3072, CVE-2015-3073, and CVE-2015-3074.
Weakness classification
- CWE-284: Improper Access Control
Primary references
- psirt@adobe.com — Third Party Advisory, VDB Entry
- psirt@adobe.com — Third Party Advisory, VDB Entry
- psirt@adobe.com — Third Party Advisory, VDB Entry
- psirt@adobe.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory