CVE-2016-1084 is a critical memory corruption vulnerability affecting Adobe Reader and Acrobat on Windows and OS X, including versions before 11.0.16, Acrobat/Reader DC Classic before 15.006.30172, and Acrobat/Reader DC Continuous before 15.016.20039. This flaw allows attackers to execute arbitrary code or cause a denial of service through unspecified vectors. Rated with a CVSS score of 9.8 (CRITICAL), the vulnerability has a low attack complexity and does not require user interaction or privileges, making it highly exploitable with severe impacts on confidentiality, integrity, and availability. The underlying weakness is identified as CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). Despite its high severity, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 11.0.15CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* | ||
<= 15.006.30121CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:* | ||
<= 15.010.20060CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* | ||
<= 15.006.30121CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:* | ||
<= 15.010.20060CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.