CVE-2016-1042: Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acr...

Security readout for executives and security teams

This is an old Adobe Reader and Acrobat security bypass affecting Windows and OS X versions before Adobe’s May 2016 fixed releases. An attacker could bypass JavaScript API execution restrictions, reducing protections that limit risky PDF behavior. The source bundle does not show active exploitation. Exposure is most likely where legacy Adobe Reader or Acrobat installations remain on Windows or OS X, especially unmanaged endpoints or archived desktop images. Current, supported Adobe versions are not identified as affected in the provided sources. Treat this as legacy hygiene unless old Adobe clients are still present. It is not KEV-listed in the provided bundle, but affected versions are outdated and should not remain in production. Mitigation focus: Upgrade Adobe Reader and Acrobat to the fixed versions or later named by Adobe.; Check Adobe APSB16-14 for vendor remediation details and affected product mapping.; Retire unsupported Reader or Acrobat versions from managed endpoints..

Prepared

Jun 13, 2026, 14:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.