CVE-2016-1085

CVE-2016-1085 is a critical memory corruption vulnerability affecting Adobe Reader and Acrobat on Windows and OS X, including specific versions of Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039. This flaw allows attackers to execute arbitrary code or cause a denial of service through unspecified vectors. With a CVSS v3.0 score of 9.8 (CRITICAL), the vulnerability is network-exploitable with low attack complexity, requiring no user interaction or privileges, and can lead to high confidentiality, integrity, and availability impacts. The underlying weakness is identified as CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.