CVE-2016-1077

CVE-2016-1077 is a critical memory corruption vulnerability affecting Adobe Reader and Acrobat on Windows and OS X, including specific versions of Reader/Acrobat before 11.0.16, Acrobat/Reader DC Classic before 15.006.30172, and Acrobat/Reader DC Continuous before 15.016.20039. This flaw allows attackers to execute arbitrary code or cause a denial of service through unspecified vectors. The vulnerability carries a CVSS v3.0 score of 9.8 (CRITICAL), indicating a severe risk with a network attack vector, low attack complexity, and high impacts on confidentiality, integrity, and availability. Its EPSS score is 0.12588, suggesting a low probability of exploitation despite its high severity. While not listed on the CISA KEV catalog, an exploit (EDB-39799) for Adobe Reader DC 15.010.20060 demonstrating memory corruption is available on ExploitDB. There is no evidence of active exploitation, and it has received minimal community discussion or media coverage.