CVE-2016-6973 is a critical memory corruption vulnerability affecting Adobe Reader and Acrobat on both Windows and OS X, including specific versions of Reader and Acrobat DC Classic and Continuous. This flaw allows attackers to execute arbitrary code or cause a denial of service through unspecified vectors. With a CVSS score of 9.8 (CRITICAL), this vulnerability is remotely exploitable with low attack complexity, requiring no user interaction or privileges, and can lead to complete compromise of confidentiality, integrity, and availability. The FAUCET Risk Score is 82/100, indicating significant risk. While there is no known active exploitation (KEV: No) and no public exploit code available in Metasploit, Nuclei, or ExploitDB, the vulnerability has received notable community discussion and media coverage, including an article from BleepingComputer.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 11.0.17CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* | ||
<= 15.006.30201CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:* | ||
<= 15.017.20053CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* | ||
<= 15.006.30201CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:* | ||
<= 15.017.20053CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.