CVE-2016-6988: Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Clas...

Security readout for executives and security teams

CVE-2016-6988 is a memory safety flaw in Adobe Reader and Acrobat on Windows and OS X. If exploited, it could let an attacker run code in the context of the affected application. The public bundle does not identify active exploitation or the attack vector. Exposure is likely limited to endpoints or virtual desktops still running the listed legacy Adobe Reader or Acrobat builds on Windows or OS X. Current managed Adobe installations are less likely exposed, but older unmanaged desktops, archived images, and offline systems should be checked. Prioritize remediation where legacy Adobe Reader or Acrobat remains in use. This is an old vulnerability, but arbitrary code execution in document software can still matter on unpatched endpoints and unmanaged systems. Mitigation focus: Update affected Adobe Reader and Acrobat builds to the fixed versions or later.; Use Adobe APSB16-33 as the authoritative vendor remediation reference.; Prioritize unmanaged endpoints, legacy images, and systems outside normal patch management..

Prepared

Jun 13, 2026, 13:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.