CVE-2016-1062

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…

published May 11, 2016

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

⚠️ A sneaky loophole in Adobe Reader and Acrobat gives attackers the chance to bypass JavaScript execution restrictions! 😱 Think of it as a restaurant kitchen where chefs can bypass the standard recipe protocols to make whatever they want — the potential for disaster is enormous when rules are ignored! 🍽️ If exploited, attackers could run arbitrary JavaScript code, potentially leading to unauthorized actions and data breaches. This could compromise sensitive documents and user data, turning a trusted tool into a vector for chaos.

Put simply

Think of it as a restaurant kitchen where chefs can bypass the standard recipe protocols to make whatever they want — the potential for disaster is enormous when rules are ignored! 🍽️ This vulnerability allows attackers to circumvent the JavaScript API execution restrictions in specific versions of Adobe Reader and Acrobat, enabling them to execute potentially harmful scripts.

What to do

If exploited, attackers could run arbitrary JavaScript code, potentially leading to unauthorized actions and data breaches. This could compromise sensitive documents and user data, turning a trusted tool into a vector for chaos. Make sure to update your Adobe Reader and Acrobat installations to versions 11.0.16, 15.006.30172, or 15.016.20039 or later, depending on your setup. Regular updates will keep your software secure from these types of vulnerabilities. You've got this! Keeping your software updated is the first step to being a security hero! 🦸‍♂️🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06316 · 93.6th percentile
Published
2016-05-11T10:00Z
EPSS history
Timeline
  • 11 MAY 10:00Z
    Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before…
    cvelistv5