CVE-2015-3076 [Critical] | Memory Corruption in Acrobat Reader

CVE-2015-3076 is rated High Risk (74.6/100): CVSS Critical severity, with high exploitation likelihood (EPSS 12.26%, 94th percentile). EPSS ranks this CVE among the most likely to be exploited in the near term. EPSS rose +1.82% over the last day, indicating growing attacker interest. High exploitation likelihood—assess exposure and prioritize remediation.

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2025-10-04	10.45%	12.26%	+1.82%
2	2025-05-11	9.03%	10.45%	+1.41%
3	2025-03-30	—	9.03%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2025-10-04

10.45%

12.26%

+1.82%

2025-05-11

9.03%

10.45%

+1.41%

2025-03-30

—

9.03%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
10.0	2.0	HIGH	`AV:N/AC:L/Au:N/C:C/I:C/A:C` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:L) Exploitation conditions are straightforward and predictable. Authentication (AU:N) No authentication is required. Confidentiality impact (C:C) Complete confidentiality impact. Integrity impact (I:C) Complete integrity impact. Availability impact (A:C) Complete availability impact.	10.0	10.0	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

10.0

2.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:L): Exploitation conditions are straightforward and predictable.
Authentication (AU:N): No authentication is required.
Confidentiality impact (C:C): Complete confidentiality impact.
Integrity impact (I:C): Complete integrity impact.
Availability impact (A:C): Complete availability impact.

10.0

[email protected]

Affected software / configurations for CVE-2015-3076

Vendor	Product	Version	Raw CPE
adobe	acrobat_reader	10.1.0	cpe:2.3:a:adobe:acrobat_reader:10.1.0:::::::*
adobe	acrobat_reader	10.1.1	cpe:2.3:a:adobe:acrobat_reader:10.1.1:::::::*
adobe	acrobat_reader	10.1.2	cpe:2.3:a:adobe:acrobat_reader:10.1.2:::::::*
adobe	acrobat_reader	10.1.3	cpe:2.3:a:adobe:acrobat_reader:10.1.3:::::::*
adobe	acrobat_reader	10.1.4	cpe:2.3:a:adobe:acrobat_reader:10.1.4:::::::*
adobe	acrobat_reader	10.1.5	cpe:2.3:a:adobe:acrobat_reader:10.1.5:::::::*
adobe	acrobat_reader	10.1.6	cpe:2.3:a:adobe:acrobat_reader:10.1.6:::::::*
adobe	acrobat_reader	10.1.7	cpe:2.3:a:adobe:acrobat_reader:10.1.7:::::::*
adobe	acrobat_reader	10.1.8	cpe:2.3:a:adobe:acrobat_reader:10.1.8:::::::*
adobe	acrobat_reader	10.1.9	cpe:2.3:a:adobe:acrobat_reader:10.1.9:::::::*
adobe	acrobat_reader	10.1.10	cpe:2.3:a:adobe:acrobat_reader:10.1.10:::::::*
adobe	acrobat_reader	10.1.11	cpe:2.3:a:adobe:acrobat_reader:10.1.11:::::::*
adobe	acrobat_reader	10.1.12	cpe:2.3:a:adobe:acrobat_reader:10.1.12:::::::*
adobe	acrobat_reader	10.1.13	cpe:2.3:a:adobe:acrobat_reader:10.1.13:::::::*
adobe	acrobat_reader	11.0.0	cpe:2.3:a:adobe:acrobat_reader:11.0.0:::::::*
adobe	acrobat_reader	11.0.1	cpe:2.3:a:adobe:acrobat_reader:11.0.1:::::::*
adobe	acrobat_reader	11.0.2	cpe:2.3:a:adobe:acrobat_reader:11.0.2:::::::*
adobe	acrobat_reader	11.0.3	cpe:2.3:a:adobe:acrobat_reader:11.0.3:::::::*
adobe	acrobat_reader	11.0.4	cpe:2.3:a:adobe:acrobat_reader:11.0.4:::::::*
adobe	acrobat_reader	11.0.5	cpe:2.3:a:adobe:acrobat_reader:11.0.5:::::::*
adobe	acrobat_reader	11.0.6	cpe:2.3:a:adobe:acrobat_reader:11.0.6:::::::*
adobe	acrobat_reader	11.0.7	cpe:2.3:a:adobe:acrobat_reader:11.0.7:::::::*
adobe	acrobat_reader	11.0.8	cpe:2.3:a:adobe:acrobat_reader:11.0.8:::::::*
adobe	acrobat_reader	11.0.9	cpe:2.3:a:adobe:acrobat_reader:11.0.9:::::::*
adobe	acrobat_reader	11.0.10	cpe:2.3:a:adobe:acrobat_reader:11.0.10:::::::*
apple	mac_os_x	—	cpe:2.3:o:apple:mac_os_x::::::::
microsoft	windows	—	cpe:2.3:o:microsoft:windows::::::::
adobe	acrobat	10.1.0	cpe:2.3:a:adobe:acrobat:10.1.0:::::::*
adobe	acrobat	10.1.1	cpe:2.3:a:adobe:acrobat:10.1.1:::::::*
adobe	acrobat	10.1.2	cpe:2.3:a:adobe:acrobat:10.1.2:::::::*
adobe	acrobat	10.1.3	cpe:2.3:a:adobe:acrobat:10.1.3:::::::*
adobe	acrobat	10.1.4	cpe:2.3:a:adobe:acrobat:10.1.4:::::::*
adobe	acrobat	10.1.5	cpe:2.3:a:adobe:acrobat:10.1.5:::::::*
adobe	acrobat	10.1.6	cpe:2.3:a:adobe:acrobat:10.1.6:::::::*
adobe	acrobat	10.1.7	cpe:2.3:a:adobe:acrobat:10.1.7:::::::*
adobe	acrobat	10.1.8	cpe:2.3:a:adobe:acrobat:10.1.8:::::::*
adobe	acrobat	10.1.9	cpe:2.3:a:adobe:acrobat:10.1.9:::::::*
adobe	acrobat	10.1.10	cpe:2.3:a:adobe:acrobat:10.1.10:::::::*
adobe	acrobat	10.1.11	cpe:2.3:a:adobe:acrobat:10.1.11:::::::*
adobe	acrobat	10.1.12	cpe:2.3:a:adobe:acrobat:10.1.12:::::::*
adobe	acrobat	10.1.13	cpe:2.3:a:adobe:acrobat:10.1.13:::::::*
adobe	acrobat	11.0.0	cpe:2.3:a:adobe:acrobat:11.0.0:::::::*
adobe	acrobat	11.0.1	cpe:2.3:a:adobe:acrobat:11.0.1:::::::*
adobe	acrobat	11.0.2	cpe:2.3:a:adobe:acrobat:11.0.2:::::::*
adobe	acrobat	11.0.3	cpe:2.3:a:adobe:acrobat:11.0.3:::::::*
adobe	acrobat	11.0.4	cpe:2.3:a:adobe:acrobat:11.0.4:::::::*
adobe	acrobat	11.0.5	cpe:2.3:a:adobe:acrobat:11.0.5:::::::*
adobe	acrobat	11.0.6	cpe:2.3:a:adobe:acrobat:11.0.6:::::::*
adobe	acrobat	11.0.7	cpe:2.3:a:adobe:acrobat:11.0.7:::::::*
adobe	acrobat	11.0.8	cpe:2.3:a:adobe:acrobat:11.0.8:::::::*
adobe	acrobat	11.0.9	cpe:2.3:a:adobe:acrobat:11.0.9:::::::*
adobe	acrobat	11.0.10	cpe:2.3:a:adobe:acrobat:11.0.10:::::::*

References for CVE-2015-3076

URL	Tags
http://www.securityfocus.com/bid/74600	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1032284	Third Party Advisory VDB Entry
https://helpx.adobe.com/security/products/reader/apsb15-10.html	Patch Vendor Advisory

URL

CVE-2015-3076

Exploit prediction scoring system (EPSS) score for CVE-2015-3076

Common vulnerability scoring system (CVSS) metrics for CVE-2015-3076

Weakness enumeration for CVE-2015-3076

Affected software / configurations for CVE-2015-3076

References for CVE-2015-3076