CVE-2016-4195

CVE-2016-4195 is a critical memory corruption vulnerability affecting Adobe Reader and Acrobat on both Windows and OS X platforms. Specifically, it impacts Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050. This vulnerability allows unauthenticated attackers to execute arbitrary code or cause a denial of service through unspecified vectors, requiring user interaction. With a CVSSv3 score of 8.8 (High), this vulnerability presents a significant risk. Its attack vector is network-based with low attack complexity, and successful exploitation can lead to high impacts on confidentiality, integrity, and availability. The Common Weakness Enumeration (CWE) associated with this vulnerability is CWE-119, indicating a buffer overflow or similar memory corruption issue. Currently, there is no evidence of active exploitation in the wild, and no public exploit code is available via Metasploit, Nuclei, or ExploitDB. Despite its age, community discussion and media coverage indicate some awareness, with one article from BleepingComputer highlighting Adobe's updates addressing numerous security vulnerabilities, including this one.