CVE-2016-1087

CVE-2016-1087 is an untrusted search path vulnerability affecting Adobe Reader and Acrobat on Windows and OS X, including specific versions of Reader/Acrobat DC Classic and Continuous. A local attacker could exploit this by placing a malicious resource in an unspecified directory, leading to privilege escalation. With a CVSS score of 7.8 (High), this vulnerability is easily exploitable with low attack complexity and no user interaction, potentially resulting in high impact to confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant media coverage, though it has seen some community discussion.