CVE-2016-1061

CVE-2016-1061 is a critical use-after-free vulnerability affecting Adobe Reader and Acrobat on both Windows and OS X platforms. Specifically, it impacts versions before 11.0.16, Acrobat/Reader DC Classic before 15.006.30172, and Acrobat/Reader DC Continuous before 15.016.20039. This flaw allows attackers to execute arbitrary code through unspecified vectors, posing a significant risk to affected systems. The vulnerability carries a CVSS v3.0 score of 9.8 (CRITICAL), indicating a severe threat. Its attack vector is network-based with low attack complexity, requiring no user interaction or privileges, and can lead to complete compromise of confidentiality, integrity, and availability. While the vulnerability has a high FAUCET Risk Score of 82/100, there is no evidence of active exploitation (not in KEV), nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also minimal, suggesting it has not garnered widespread attention.