CVE Catalog

CVE-2016-4215

Critical
Published: Translated: NVD NIST

Summary

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.

Risk Assessment

Bypassing JavaScript API execution restrictions may lead to the execution of malicious code, posing a serious threat to user data security and organizational systems.

Recommendation

It is recommended to update Adobe Reader and Acrobat to the latest versions to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS