CVE-2016-1037: Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acr...

Security readout for executives and security teams

CVE-2016-1037 is a memory corruption flaw in Adobe Reader and Acrobat on Windows and OS X. A malicious PDF or related unspecified vector could let an attacker run code or crash the application. The sources identify fixed versions but do not provide technical root cause details. Exposure is likely on endpoints or shared systems still running the listed pre-fix Adobe Reader or Acrobat versions on Windows or OS X, especially where users open PDFs from email, web downloads, or external parties. Prioritize remediation where Adobe Reader or Acrobat remains in business use. The vulnerability can lead to code execution, but the supplied evidence does not show active exploitation. Patch validation should be part of endpoint hygiene and legacy software reduction. Mitigation focus: Upgrade Reader/Acrobat 11.x to 11.0.16 or later where still present.; Upgrade Acrobat/Reader DC Classic to 15.006.30172 or later.; Upgrade DC Continuous to 15.016.20039 or later..

Prepared

Jun 13, 2026, 14:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.