CVE-2016-4106

CVE-2016-4106 is an untrusted search path vulnerability affecting Adobe Reader and Acrobat on Windows and OS X, including specific versions of Reader/Acrobat DC Classic and Continuous. This flaw allows a local attacker to achieve privilege escalation by introducing a malicious resource into an unspecified directory. Rated with a CVSS score of 7.8 (High), it requires local access but has low attack complexity, potentially leading to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion is minimal, with only one mention found.