CVE-2016-1040
CriticalSummary
Adobe Reader and Acrobat before version 11.0.16, and Acrobat and Acrobat Reader DC Classic before version 15.006.30172, as well as Acrobat and Acrobat Reader DC Continuous before version 15.016.20039 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized execution of JavaScript code, posing a serious threat to user data security and organizational systems.
Recommendation
It is recommended to update Adobe Reader and Acrobat to the latest versions to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2016-1038, CVE-2016-1039, CVE-2016-1041, CVE-2016-1042, CVE-2016-1044, CVE-2016-1062, and CVE-2016-1117.