CVE-2016-4106: Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader...

Security readout for executives and security teams

CVE-2016-4106 is a local privilege-escalation issue in Adobe Reader and Acrobat. A local user could abuse how the application searches for resources and load a malicious resource from an unintended directory. This affects older Windows and OS X versions and was addressed in Adobe’s APSB16-14 update. Exposure is most likely on endpoints running Adobe Reader or Acrobat versions older than 11.0.16, DC Classic 15.006.30172, or DC Continuous 15.016.20039 on Windows or OS X. Treat as a routine but important endpoint hygiene item. It is not presented as actively exploited, but outdated Adobe desktop software can help attackers increase privileges after gaining local access. Mitigation focus: Update Adobe Reader and Acrobat to the APSB16-14 fixed versions or later.; Prioritize systems where standard users can run Adobe Reader or Acrobat.; Check Adobe’s APSB16-14 advisory for product-specific update guidance..

Prepared

Jun 13, 2026, 16:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.