CVE Catalog

CVE-2016-0940

Critical
Published: Translated: NVD NIST

Summary

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, and Acrobat and Acrobat Reader DC Classic before 15.006.30119, as well as Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code.

Risk Assessment

Exploitation of this vulnerability may lead to remote code execution, posing a serious threat to the security of the organization's systems.

Recommendation

It is recommended to update Adobe Reader and Acrobat to the latest versions to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0932, CVE-2016-0934, CVE-2016-0937, and CVE-2016-0941.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS