CVE-2016-6999: Integer overflow in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 1...

Security readout for executives and security teams

Adobe Reader and Acrobat versions listed in the advisory had an integer overflow that could allow arbitrary code execution. In business terms, a vulnerable PDF reader could become a path to workstation compromise if attackers can trigger the flaw. The sources do not show active exploitation or a detailed attack vector. Exposure is most likely on endpoints still running the affected Adobe Reader or Acrobat versions on Windows or OS X. Organizations with legacy desktop images, unmanaged PDF software, or outdated Adobe DC tracks should prioritize inventory and version verification. Treat this as a high-priority legacy endpoint hygiene issue. Arbitrary code execution in PDF software can affect user workstations, but the available sources do not support emergency claims of active exploitation. Mitigation focus: Inventory Adobe Reader and Acrobat installations on Windows and OS X.; Update Acrobat and Reader XI to 11.0.18 or later.; Update DC Classic to 15.006.30243 or later..

Prepared

Jun 13, 2026, 13:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.