CVE-2016-1037

CVE-2016-1037 is a critical memory corruption vulnerability affecting Adobe Reader and Acrobat products across Windows and OS X. Specifically, it impacts Adobe Reader and Acrobat before version 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039. This flaw allows unauthenticated attackers to execute arbitrary code or cause a denial of service through unspecified vectors. The vulnerability carries a CVSSv3 score of 9.8 (CRITICAL), indicating a severe risk. Its attack vector is network-based with low attack complexity, requiring no user interaction or privileges, and can lead to complete compromise of confidentiality, integrity, and availability. The underlying weakness is identified as CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). While there is no evidence of active exploitation in the wild (not in KEV), and no known public exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion with 10 mentions, placing it in the top 1% of CVEs for community attention.