CVE-2016-6993: Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Clas...

Security readout for executives and security teams

CVE-2016-6993 is a memory-safety flaw in Adobe Reader and Acrobat for Windows and OS X. A successful attack could run code on the affected user’s machine. The public CVE record does not provide the attack vector or a CVSS score, but arbitrary code execution in a document application is business-relevant. Organizations may be exposed where Windows or OS X endpoints still run affected Adobe Reader or Acrobat versions. Exposure should be confirmed through software inventory because the bundled data lists fixed thresholds but no deployment context. Prioritize remediation for endpoints that open external documents or handle untrusted files. Treat this as a high-priority legacy software exposure, especially where vulnerable Adobe versions remain installed. Mitigation focus: Update Adobe Reader and Acrobat to the fixed versions or later per APSB16-33.; Remove or replace unsupported legacy Adobe Reader and Acrobat installations.; Confirm endpoint management tools no longer deploy vulnerable Adobe versions..

Prepared

Jun 13, 2026, 13:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.