CVE-2016-6938

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat…

published September 17, 2016

CVSS
—
EPSS
9%
Percentile
95.1
In the wild
Unconfirmed
What it is

⚠️ This use-after-free vulnerability in Adobe Reader could allow an attacker to execute arbitrary code with a sneaky exploit! Imagine a restaurant that forgets to remove an empty plate from your table. If someone comes along and replaces it with a dangerous dish without you noticing, you might end up eating something you never ordered! An attacker could exploit this vulnerability to run any code they desire on your machine, potentially leading to unauthorized access, data theft, or even complete system compromise. This could be absolutely devastating if sensitive information is involved!

Put simply

Imagine a restaurant that forgets to remove an empty plate from your table. If someone comes along and replaces it with a dangerous dish without you noticing, you might end up eating something you never ordered! This use-after-free flaw occurs when the application tries to access memory that has already been freed, allowing attackers to execute arbitrary code through unspecified vectors.

What to do

An attacker could exploit this vulnerability to run any code they desire on your machine, potentially leading to unauthorized access, data theft, or even complete system compromise. This could be absolutely devastating if sensitive information is involved! To protect yourself, update to Adobe Reader and Acrobat version 11.0.17 or later, or ensure that Acrobat Reader DC Classic is updated to at least version 15.006.30198, and DC Continuous to 15.017.20050. Regularly checking for updates is essential! You got this! Keep your software updated, and you'll be securing your digital space like a pro! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08706 · 95.1th percentile
Published
2016-09-17T01:00Z
EPSS history
Timeline
  • 17 SEP 01:00Z
    Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat…
    cvelistv5