CVE-2016-1050

CVE-2016-1050 is a critical use-after-free vulnerability affecting Adobe Reader and Acrobat on both Windows and OS X. Specifically, it impacts Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039. This flaw allows attackers to execute arbitrary code on vulnerable systems through unspecified vectors, posing a significant security risk. With a CVSS v3 score of 9.8 (CRITICAL), this vulnerability is remotely exploitable with low attack complexity and requires no user interaction or privileges, leading to high impacts on confidentiality, integrity, and availability. The EPSS score of 0.02751 indicates a relatively low probability of exploitation in the wild compared to other CVEs, despite its high severity. Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Furthermore, there is minimal community discussion or media coverage surrounding this vulnerability, suggesting it has not garnered significant attention from security researchers or the public.