CVE-2016-4107: Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Clas...

Security readout for executives and security teams

CVE-2016-4107 is a memory safety flaw in older Adobe Reader and Acrobat releases. If triggered, it could let an attacker run code on a Windows or OS X system. The source bundle does not describe the triggering vector, exploit details, or confirmed active exploitation. Exposure is most likely on endpoints still running the listed legacy Adobe Reader or Acrobat versions on Windows or OS X. Organizations with long-lived desktop images, unmanaged Macs, or archived application stacks should check carefully. Treat this as a high-priority legacy endpoint cleanup item. The main business risk is code execution through vulnerable PDF software, but current source evidence does not establish active exploitation. Mitigation focus: Update affected Adobe Reader and Acrobat installations to the fixed versions or later.; Use Adobe APSB16-14 as the primary vendor guidance source.; Remove or isolate legacy Reader and Acrobat installations that cannot be updated..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.