CVE-2015-5109: Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrob...

Security readout for executives and security teams

This flaw affects older Adobe Reader and Acrobat versions on Windows and OS X. If exploited, it could let an attacker run code on a user’s machine. The source bundle does not identify the delivery vector, so urgency depends on whether legacy Adobe PDF software remains in use. Exposure is most likely on endpoints still running affected Adobe Reader or Acrobat builds on Windows or OS X. Modern managed environments are lower risk if Adobe updates have been consistently applied since July 2015. Treat this as a legacy endpoint hygiene issue with high impact if affected software remains installed. It should not outrank confirmed actively exploited issues, but any discovered vulnerable Adobe installs should be remediated promptly. Mitigation focus: Upgrade Adobe Reader and Acrobat to the fixed versions named in APSB15-15 or later.; Retire affected 10.x, 11.x, DC Classic, and DC Continuous builds where still present.; Prioritize systems that process untrusted PDF content or support high-risk users..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.