CVE-2016-4199

CVE-2016-4199 is a critical memory corruption vulnerability affecting multiple versions of Adobe Reader and Acrobat on both Windows and OS X. This flaw allows unauthenticated attackers to achieve arbitrary code execution or cause a denial of service through unspecified vectors, impacting products from Adobe, Apple, and Microsoft. The vulnerability carries a high CVSS score of 8.8, indicating a severe risk. It has a network attack vector and low attack complexity, requiring user interaction (UI:R) to exploit, and can lead to high confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation (KEV: No) and no public exploit code available in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion and media coverage, suggesting awareness among security researchers.