CVE-2016-1046

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat…

published May 11, 2016

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

🚨 A use-after-free vulnerability in Adobe Reader and Acrobat can let attackers execute arbitrary code, opening the door to chaos on your system! 🔥 Think of it like a restaurant that serves food from expired ingredients because they forgot to check their stock. One wrong dish could make everyone sick—similarly, this flaw allows malicious code to slip through the cracks unnoticed. If exploited, an attacker could potentially gain unauthorized access to your system, run malicious code, and wreak havoc on your files. This could lead to data theft or even complete system compromise—quite the recipe for disaster!

Put simply

Think of it like a restaurant that serves food from expired ingredients because they forgot to check their stock. One wrong dish could make everyone sick—similarly, this flaw allows malicious code to slip through the cracks unnoticed. This use-after-free vulnerability occurs when the application continues to reference memory that has already been released, which can be exploited to execute arbitrary code. It affects Adobe Reader and Acrobat versions before 11.0.16, as well as various versions of Acrobat Reader DC on Windows and OS X.

What to do

If exploited, an attacker could potentially gain unauthorized access to your system, run malicious code, and wreak havoc on your files. This could lead to data theft or even complete system compromise—quite the recipe for disaster! Update Adobe Reader and Acrobat to the latest version immediately—make sure you’re running version 11.0.16 or higher, or for DC users, version 15.006.30172 or 15.016.20039 at least. Regularly check for updates to stay protected against such vulnerabilities! You've got this! Patch up and lock down your system, and you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06410 · 93.6th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat…
    cvelistv5