CVE-2016-6997

CVE-2016-6997 is a critical memory corruption vulnerability affecting Adobe Reader and Acrobat on both Windows and OS X, allowing for arbitrary code execution or denial of service. This flaw impacts versions prior to 11.0.18, DC Classic before 15.006.30243, and DC Continuous before 15.020.20039. With a CVSSv3 score of 9.8 (Critical), this vulnerability has a network-based attack vector, low attack complexity, and requires no user interaction, leading to high impacts on confidentiality, integrity, and availability. The CWE-119 classification indicates a memory corruption issue. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 11 mentions, and was covered in at least one media article at the time of its disclosure. It is not listed on CISA's KEV catalog and is inactive on the Hot List.