CVE-2016-6946: Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Clas...

Security readout for executives and security teams

CVE-2016-6946 is a memory-safety flaw in older Adobe Reader and Acrobat versions. If exploited, it could let an attacker run code on a Windows or OS X endpoint. The source bundle does not describe the attack path beyond unspecified vectors, and it does not show active exploitation. Exposure is most likely on endpoints still running legacy Adobe Reader or Acrobat versions below the fixed releases. Organizations with unmanaged desktops, old images, kiosk systems, or archived software packages should verify whether affected Windows or OS X installations remain present. Prioritize remediation where outdated Adobe Reader or Acrobat remains in use, especially on employee endpoints handling external PDFs. This is a legacy issue, but arbitrary code execution on common desktop software can still create meaningful business risk if old installations persist. Mitigation focus: Upgrade affected Adobe Reader and Acrobat installations to fixed versions or later.; Remove unsupported legacy Adobe Reader or Acrobat installations from managed endpoints.; Check Adobe APSB16-33 for vendor-supported update guidance..

Prepared

Jun 13, 2026, 13:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.