CVE-2016-1118: Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acr...

Security readout for executives and security teams

This is a memory corruption flaw in Adobe Reader and Acrobat on Windows and OS X. If successfully triggered, it could let an attacker run code or crash the application. The sources do not describe the exact attack vector, so business urgency depends on whether legacy Adobe Reader or Acrobat versions remain deployed. Organizations are exposed if Windows or OS X endpoints still run the affected Adobe Reader or Acrobat versions. The bundle’s affected-product metadata is incomplete, so exposure must be validated through software inventory rather than relying on CPE data. Prioritize remediation where Adobe Reader or Acrobat remains on user endpoints, especially teams handling outside documents. The vulnerability allows code execution, but the bundle does not show active exploitation or provide severity scoring. Mitigation focus: Upgrade Adobe Reader and Acrobat to the fixed versions or later.; Prioritize endpoints that open external or untrusted documents.; Remove unsupported or unused Adobe Reader and Acrobat installations..

Prepared

Jun 13, 2026, 14:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.