CVE-2016-4198

CVE-2016-4198 is a memory corruption vulnerability affecting Adobe Reader and Acrobat on Windows and OS X, including versions before 11.0.17, Acrobat/Reader DC Classic before 15.006.30198, and Acrobat/Reader DC Continuous before 15.017.20050. This vulnerability, with a CVSSv3 score of 8.8 (High), allows unauthenticated attackers to execute arbitrary code or cause a denial of service through unspecified vectors, requiring user interaction. While the vulnerability has a high risk score and received some media coverage, there is no evidence of active exploitation, nor are there publicly available exploit modules in common frameworks like Metasploit. Community discussion and media attention indicate awareness, but it is not on the CISA KEV catalog.