CVE-2015-5099: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrob...

Security readout for executives and security teams

CVE-2015-5099 is a memory-safety flaw in Adobe Reader and Acrobat that could let an attacker run code on a user's computer. The public record does not describe the attack vector, but affected products process untrusted PDF content, so exposure matters where old Adobe clients remain installed. Organizations are exposed if endpoints still run Adobe Reader or Acrobat 10.x before 10.1.15, 11.x before 11.0.12, DC Classic before 2015.006.30060, or DC Continuous before 2015.008.20082 on Windows or OS X. Prioritize remediation if any legacy Adobe Reader or Acrobat versions remain. This is an old issue, but the impact is code execution on user endpoints, and unsupported PDF clients often persist outside normal patch coverage. Mitigation focus: Update affected Adobe Reader and Acrobat installations to the fixed releases or later.; Use Adobe APSB15-15 to confirm the correct update path for each product track.; Remove or replace obsolete Adobe Reader and Acrobat versions that cannot be updated..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.