CVE-2016-6970: Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acr...

Security readout for executives and security teams

CVE-2016-6970 is a memory-corruption flaw in older Adobe Reader and Acrobat releases for Windows and OS X. Successful exploitation could let an attacker run code or crash the application. The source bundle does not provide exploit details, CVSS, CWE, or active-exploitation evidence. Exposure is mainly endpoint systems still running the affected Adobe Reader or Acrobat versions on Windows or OS X. Organizations with unmanaged desktops, legacy images, or old document-processing workflows have higher residual risk. Prioritize remediation where affected Adobe products remain on user endpoints, especially systems handling external documents. The business urgency is driven by possible code execution, but current evidence does not support claiming known active exploitation. Mitigation focus: Upgrade Reader/Acrobat to 11.0.18 or later where applicable.; Upgrade Acrobat/Reader DC Classic to 15.006.30243 or later.; Upgrade Acrobat/Reader DC Continuous to 15.020.20039 or later..

Prepared

Jun 13, 2026, 13:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.