CVE-2016-1118

CVE-2016-1118 describes a critical memory corruption vulnerability affecting Adobe Reader and Acrobat versions prior to 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on both Windows and OS X. This flaw allows unauthenticated attackers to execute arbitrary code or cause a denial of service through unspecified vectors. With a CVSS v3 score of 9.8 (CRITICAL), this vulnerability is highly severe, indicating it can be exploited remotely with low complexity and without user interaction, leading to complete compromise of confidentiality, integrity, and availability. The EPSS score of 0.02899 suggests a relatively low probability of exploitation in the wild compared to other CVEs. Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a lack of widespread attention or public awareness.