CVE Catalog

CVE-2016-1041

Critical
Published: Translated: NVD NIST

Summary

Adobe Reader and Acrobat before version 11.0.16, and Acrobat and Acrobat Reader DC Classic before version 15.006.30172, as well as Acrobat and Acrobat Reader DC Continuous before version 15.016.20039 on Windows and OS X, allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized execution of JavaScript code, posing a risk to user data security and organizational systems.

Recommendation

It is recommended to update Adobe Reader and Acrobat to the latest versions to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2016-1038, CVE-2016-1039, CVE-2016-1040, CVE-2016-1042, CVE-2016-1044, CVE-2016-1062, and CVE-2016-1117.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS