CVE-2017-3016 is a memory corruption vulnerability affecting multiple versions of Adobe Acrobat Reader across Adobe, Apple, and Microsoft platforms. This high-severity flaw (CVSS 8.8) allows for arbitrary code execution through a low-complexity attack requiring user interaction, posing a significant risk of complete compromise. While not listed in CISA's KEV catalog, its EPSS score and media coverage indicate a notable level of concern. Currently, there is no public exploit code available in Metasploit, Nuclei, or ExploitDB, and community discussion is limited.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 11.0.0, < 11.0.21CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* | ||
>= 15.000.0000, < 15.006.30355CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:* | ||
>= 17.000.0000, <= 17.011.30066CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:* | ||
>= 17.000.0000, < 17.012.20098CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* | ||
>= 15.000.0000, < 15.006.30355CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.